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Because it presents information of lasting value, this 
» 

thesis report, which has had only very limited distribution, is 
being issued as a Project \/hirlwind R-series report. 

Reliability of operation is one of the most important 
goals of the research being done on the large-scale electronic 

l 

digital computer. Part of this general problem is the development 
of methods of error detection and trouble location. A very useful 
technique adopted by Project Whirlwind Is the provision of facilities 
for the variation of d-c supply voltages to various parts of the 
computer. By this means, dynamic and incipient failures can be con¬ 
verted into steady-state failures, and deteriorating components 
removed before they cause errors„ 

This so-called marginal checking makes use of specially 

designed check pi'ablera.3, A method of designing such problems for 

/ 

use with the Whirlwind I computer is developed in this thesis. 
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ABSTRACT 

■■ ■ ■■ . .— ■ »- « 

l 

This thesis study describee a method of designing 
check problems to be used in detecting errors and locating trouble 
in a large-scale digital computer. The computer is systematically 
subdivided into small sections. A study is made to determine ths 
paths (channel segments) in these sections along which information 
la routed, aa well as the sources, destinations, and methods of 
transmission of the information. 

One of these methods Is selected for the routing of each 
type of information from one of the sources to one of the destina¬ 
tions of each channel segment. Wie destination is then examined to 
see whether It received the proper information. 

This process, used in conjunction with the Project Whirl¬ 
wind method of marginal checking, permits a sequence of instructions ' 

to the computer to be specified. Limited tests in the Whirlwind I 
computer indicate that test sequences designed by this method will 
be quite useful. 


t 
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OKGATI Z ATS OS 

This theels deals with a very specie! l?ed tonic vhich roulr-js 
conridorable background material for its complete treatment. The flr<<t 
thro® chapter® provide moot of this material while dev lo’ ing pop.® of - 
the bases for the method presented. la detail, th« material is arrangsd 
as follow®: 

Chapter 1 present® the problem of checking digltel eomrute <» 
and indicate* some ro*pihle solutions. 

Chapter ? is a fairly detailed description of the ot>erstlOR 

Of WI. 

C‘r.• pter } discusses the nature of failures and their influence 
on checking procedures. 

Chapter 4 presents a systematic arproach to designing special 
problems tr check the operation of the computer. 

Chapter 5 gives a number of examples of the a^l icr tient of 
the approach to checking WI. 

Chapter 6 discusses and evaluates the resu’ts of the thesis., 
Appendix I is a short glide to coding prepared by the Rleeiifonie 
Coir-iter division of the Servomechanisms Laboratory, P.I.T, 

Appendix II contain* the coded programs which hay© been develop©* 
by the method described in this thesiB. 

Appendix TIT conic ins a glossary of special terns used in this 

thesis. 


v . 


- 9 ~ 



Report- R-177 


2 “ in^tomyCTroff 

1.1 The Automatic r, V ri te.l Computer 

The automatic digital computer is a tool'for the eolation of 
numerical problems. It is capable of performing entirely automatically 

any desired sequence of arithmetic operations on riven data. This it in 
distinction to analogue com utation where the data is handled as phyfieal 
quantities in a system obeying Physical laws having the same form a: the 
operations involved (sow Fig. 1). It also ha# the aMlit’ to choose amoc:' 
several alternate computing routiner on the basis of its own ealculatiou»< 

A wide variety of croblems can be solved through the use of the autocalls 
di ital coruter because of the great flexibility implied in these pro- 

I 1 ** 

perties, ** The high calculating speed which is characteristic of the 
automatic digital corruter, makes it rarticulnrly valuable because of the 
gr^at number of problems whose solution by more customary means, though 
possible In principle, is impossible in a practical sens© because of the 
prohibitive amount of time and labor involved. 

As one night suspect, e rather complicated device Is require- 
to accomplish these results. For examrle,- whirlwind I (Wfl), th® electro: c 
digital computer under development et th® F.X.T. Servomechanisms Laboratory, 
consists of approximately 4500 vacuum tubes plus aseoci lad components aucb. 
as resistors, capacitors, Inductors, and crystal rectifier diode®. Pood 
comruter design requires that each individual component be orercted under 
conditions that ensure as long a life as poeaible^ Nevertheless, each 


* 


Superscripts refer to the numbered bibliography 
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component will eventually fail to operate satisfactorily. Whan sue a a 
failure occurs, it is cult© likely, though by no moans certain, tht.c an 
error will apeer in the ermruted results, Such errors, if they r«naia 

undetected, nay cause considerable damage. Thera is no lon er any 3oub'; 
thr.t cor outers can be made to workj the tables of functions calc lifted li¬ 
the Harvard Commtotion Laboratory have amply demonstrated this fact. T j 
Question is: how consistently will they provide correct results! Reliable 
results must be obtained if the latent value of the automatic digital cc>. 
ruter is to be realized in practice. 

1.? Reliability 

It has been established tftit erroneous results are undesirable 

but they ere also inevitable. This is not just a peculiarity arises ft* n 

the upe of the automatic distal compter; other methods of rrobleei solution 

are also subject to error. What level of error occurrence can be tolerated? 

before this question can be answered quantitatively, a. considerable amount 

of statistical data must be accumulated. It will be difficult to latarp ot 

such date on a comparative basis because of the speed differences among 

various methods. The amount of computation which can be done during the perl 

between errors trust be taken into consideration in some suitable manner. 

Thus far, only qualitative reasoning hrs been aprlied to this problem, 

* 

However, one error per week has been surgested by a leading authority 
as a reasonable goal for a comruter of the same nature as Whirlwind I« 

« 

This statement was trade by J. V. Forrester durii^j a discussion of hie 
talk *t the Harvard Symposium on Large-Scale Tigital Calculating Machl ery 
on September 13, 19 ,4 5® The proceedings of this symposium have rot yet 
been published. 



The fact that orror«• will occur do&a not mean that we past tie 
reelgnod to accept erroneous results. There are many methods for chae&ixv. 
on the validity of Csleiileted results (see section i.J end reference'* o 

i 

?nd 9)« ''hen It la knctn that a particular result Is In error, it is usual y 
possible to remove the source of the error and then proceed to calculate 
the correct value. Thus, by using these methods, the effective reliabilitr 
of the computer can be increased tremendously, although the speed ie reduced 
somewhat. Of coarse, there are a number of aprllcatlons in which time le 
an imortant factor so that there is o time available for a second cal¬ 
culation under error-free conditions. Such ao'rlie'stienu will require very 
special techniques to achteve satisfactory reliability, but error detectio i 
is essential even then. 

It must be revised that It Is oulte impossible to detect nil 
errors, for it is certainly conceivable that two failures crn occur p!hiu1~ 
taneously in such a way as to nullify the method being used. This ie not 
to say thi t there is no method for dot acting error* caused by two compen¬ 
sating, simultaneous failures. It is always possible, at leaut la princlp a, 
to devise a scheme which will detect any specified combi nation of faults, 
but in the most general case, additional equipment would be required. 

This additional equipment would give rise to new combinations of faults 
which could not be detected without farther resort to extra equipment 
For a given computer, there will always be some combinetlono of faults 
which canr.ot be detected without changing the comruter. It become® neces¬ 
sary to decide uron an adequate degree of error detection. Here the 
economics of the aitujitien is an important factor. Since any desired levs! 
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of chocking cun be provided at the coat of sithsr iaoney or tisao, some 
balance must be achieved between conflicting lntersatfl,. It eearar to be 
Oil to generally agreed that the probability of an uadsffcecsed error cocwrrl; .g 
la a rnehine which ie checked in all cases of single failure* is suffielan iy 
low. However, any method which provides a check in mary cases of multiple 
faulte at little extra, cost should be carefully considered. 

At mentioned previously the time required to detect an error by 
a given method Is frequently of vital lnroortance in application* whcri tim 
is a factor. These may be exemplified by the problem of directing thi fit 
of air traffic in accordance with the specified schedules and the actual 

v 4 

positions and velocities of the aircraft involved. The comruter 1 b used 

to correlate this data and surely the appropriate instructions to the pile 
of the aircraft regarding the flight pattern to be maintained. Vhen these 

instructions are in error, the pilots and the operator of the control fcow«r 
should be informed immediately so that arrropriate emergency measures may 
be taken. The imrortanoe of instantaneous error dotection is quit© evident 
In t ie ease. Indeed we maj even look askance at the fact that it if? 
possible for some errors to go undetected. However, we trust remember that 
it ie quite possible for the aircraft itself to fail. This is a vary 
special case and the accuracy requirements imposed are far greeter than 
would be encountered in rost ordinary arplicrtlons. Even where the danger 
to human life is not so immediate, speed in error detection Is quite Im¬ 
portant. A considerable amount of erroneous computation might be accumuls id 
before an error is detected. This will be wasteful, but it ie again dif¬ 
ficult to rase ether than a qualitative Judgment on the value of speed In 
error detection. In general, speed is acMeved at the cost of equipment 
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and additional equipment is another source of trouble, a*lde from this 
monetary aspects involved. It may l>» said, with little fear of contra— 
diction, that It ie preferable to save equipment at the cost of time, all 
other factors being equal* 

One® a failure 1* known to exist, the next step is to repair It. 
Pefore any repairs can be carried out, the faulty conponcnt must be locat ?..■> 
Conventional methods of trouble location In small pieces of equipment arc* 
completely inadequate for a Job of this ra nitude. Special automatic 
methods must be devised to Isolde the faulty component* It is not ieoin> 
ary to locate the specific component by thee® automatic means, but tie 
fault should be isolated to a unit in which conventional techniques jnay 
be employed In a reasonably short time. a. computer which makes one armor 
a week cannot be said to be very reliable If it takes a week to locate 
Its source. In that time, another error may h^ve occurred rnd another wo c 
of troa'le loc/.tIon Is In prospect. Under such conditions, all of the 
oper;tlng time of the comruter vould be taken ur In trouble location. Th 
useful outrut would be practically nil. It does not B^em unreasonable 
to expect that the computer perform useful work during at least half t.h« 
tine it Is operating. Indeed, this would he a rather poor C'-rputer. On 
the other hand, it takes a finite amount of tine to make the actual rep&l s, 
'-‘rperiance with 'fhirlwind I Indicates that this tine Is of the order of 

i 

magnitude of 15 or 20 minutes, on the average. It is pointless to lie 

great lengths to develop an automatic trouble location scheme which 

PO 

Isolates th® fault within a few seconds. A. perfectly satisfactory 
method would be one which located the faulty component In less than ! if) 
minutes. This would mean that approximately an hour would be required 
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to put the machine In operating condition after an error fins been ioctal 

Less than 1C- of the operating time o? the eomnuter (assuming one error 
rer week) would be lo=t for this reason. 

Heretofore the term checking hoe been aprlied to methods t'cr 
the detection of errors in the operation of the entire counter. When 
an error Is detected by such a method, the faulty component is known to 
be somewhere in the computer. Thu* a measure of trouble location hat 
been achieved, even though it la of dubious value. Whan an error i® in¬ 
dicated by a method deviled to check a relatively small unit, the faulty 
component is known to exist in that unit. A. large measure of trouble 
loc: tion hae been achieved. There in no difference between checking 
and trouble loc. tion, The distinction is one of degree rather than kind. 

1.3 Principles of Checking 

Basically, the problem to bo solved by the v- riou* chscfcii -45 
methods is thf.t of ’-ro Tiding a suitable standard to comp; re with the 
results obtained from the unit being checked. The choice of the ei?<> 
of the unit to be checked depend* on the degroe of trouble location ;h^t 
ie deeired. It ie elmr that if no fault exists in any of the small unit i 
which comprise the computer, then no fault exists in the entire computer. 
Thue, if a scheme is davlced to check every small unit of the com-ut^r, 
including ell their Interconnections, then this eheme checks the entire 
computer. The various methods which hove been suggested thus far differ 
in the flexibility with which they may be applied units of varying site. 

There ore essentially two different anrro&ches to the ’rcblem 
of generating a comparison standard: built-in checking and programmed 
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checking. Additional equipment generrt.©s this standard In built-in 
checking schemes. In programmed checking, the computer treats the cal¬ 
culation of this standard as another proller which it," can. solve. Built- 
in checking p<rrit« higher coroutlng speeds but reouires rare equipment 
than program- ed checking. Fore than one tyre of cheeking is frequently 
used in a computer. The amount of e ch type is dictated by economic 
considerations. 

1.31 Built-In Cheeking 

Perhaps the most obvious way of chocking & unit is to rrovi&e 
an identical one to duplicate its function. The results obtained by the 
duplicate unit are a standard with which to compare those of the original 
unit, A special unit is provided to make this comparison. If an error 
is detected, it may h^ve been enured by a failure in either unit. It 
i« alro possible (though irprobable) for the same failure to occur in 
both unite simultiajneously, giving a correct check in the presence of an 
error. This he been discussed in section 1.? and la not a serious ob¬ 
jection. It is, of course, possible to provide three or more identical 
units to guard against such double failures. However, none of the existing 
or projected commuters has Incorporated more thru two sets of identical 

equipment because of the cost involved. Checks of tMs tyre or« known 

c 

as multiple checks. kultiple checks are generally used for large units; 
the number of comparison units required when small units are involved 
is felt to be excessive, 

i 

A more efficient use of ohecking equipment i* achieved by a 
comrarison of some Identifying characteristic (or tag) of the actual and 
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espeeted result® rather than the result* theaeelvee. Such chocks are 
called tag checks? "casting out nines" is a tag chock ue< d in decimal 
multiplication. In some very special cases,. certaincharacteristici..of 
she result of an operation may he independent of the numbers Involved. 

It is frequently advantageous to rrovide a check which takes cognizance 
of the situation. An example of such a rredetermined chock is pivea 
in section 5*1?"^ 

A more detailed dipcusslon of built-in checking may he found 

in reference 6. 

1.3? Program’ od Checking 

The process by which a problem Is stated in a form suitable fc 
solution by s corruter i » called rrogranr lng. Thus, thoste chocking motto, 
which treat the generation of a comparison standard as & problem to be 
solved by the computer . 1*8 referred to bp Trograirred checking. There ar< 
two approaches possible to programmed checking:! mathematical check* ant. 
test checking. 

Mathematical checks are based on some identity satisfied by th< 
results of b calculation. Checking procedure* bused on these identities 
are applicable to all corruters for they a'o essentially another grcur 
of problems which are within the problem-solving capabilities of digital 
commuters. There an* certain tyres of identities which are encountered 
«o frequo tly that name^ have been assigned tr the checking procedures 
which are bused upon their use. However, there is undoubtedly a group 
of miscellaneous relationship* which hold in special casus that cannot 
bo fitted Into such a classification. These mi see 1 laaeous techniques; 
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depend largely on the alertness find ingenuity of the programmer and 
cannot he discussed here-. 

The first of the a© scheme© Is knovn as repeat checking, v, lareii: 

the solution of a problem Is repeated a specified number of times and 

o 

both (or mere) sets of results are corpared. 7 In identity checking 

two (or more) equivalent mathematical procedures are used to obtain two 

(or more) sets of results for comparison. With some problems, a rather 

good check may be obtained by reversing the process of problem solution 

and finding the given initial data from the allied solution, yielding 

6 " 

what is knovn as Inverse checking. In sample checking, th® solution 

to a general class of problems 1© obtained for a special case in wMch 

the answer is k: own; the correct solutlrn indicates that the computer ii» 

$ 

( probably capable of solving this general class of Trebles*. It is poesi. :le 

to examine the solutions of problems which re known to lead to continum:. 

o 

functions for continuity, thus giving rise to smoothness checking." 

On the whole, mathematical checks are applicable to large 
groups of units and hence are not particularly useful in trouble loca¬ 
tion. They vary in effectiveness with the tyres of failures that exist, 
but they are quite useful for an overall check on a sped'ic problem. It 
is not necessary to know that the whole com uter is working to be reason¬ 
ably sure that the results are correct. Mathematic: 1 checks are discuss* 5 
more fully in reference 6„ 

In test checking, the results obtained from tho solution of 
specially designed problems ar n cornered with the known answers. Tech¬ 
niques for deslmlnf such problems hove not yet been fully developed. 
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Most of the work In this field ha a been of an exploratory nature /"*•'* * tf 
The several approaches which have been suggested are applicable only 
uMer very restricted coeditions. The most severe shortcoming of some 
of these In that they make use of single functions in sequence* which 
cannot be performed by the commler. Each operation that th® computer 
perform* consists ofa predetermined sequence of such functions; the pro 
grarrer may chocs® the sequence of operations arbitrarily, but he cannot 
do so with the functions. Some of the a"proaches which do not suffer 
from this «hortcoming may be quite useful in specific eases, but they 
lack funerality, TMn thesis represent* en attempt to develo a system.?.* c 
approach (for use with 'Tfl) which in generally applicable to the design 
of such -nroblemsc The resulting probl ems will be referred to as test 
sequence** 


To some extent, programming Is still an art in which experience 

end ingenuity are valuable asset*. Systematic ap roaches to programming 

have been proposed which are quite good, but a completely satisfactory 

ik 26 pp pi 

method has not yet been found, * * ’ " In many cases,, much more effi¬ 

cient programs may be obtained more easily by methods other than a liter 
application of the general method* This would seem to imply that a sya» 
tematic method of tact checking is not necessarily the bant method in a 
specific case. Indeed, this thesis contains examples in which departures 
from the general method have been made in the interests of simplicity and 
efficiency. In short, the proposed method is only to he used where sinpl s* 
methods are rot immediately obvious* 



l.U Qrffaalsatloa of ThS The sis 

A large amount of detailed information abo .'-% t.ho oormutor O'vi: 

i 9 required to thoroughly e so lain many of the examples? of tM? tho-io. 

The paper would become quite unwieldy if nil thin detail were Included® 

Idxch of the information found in some of the references ha* therefore 
X ? I 5 *i o 

bean omitted* *' * J however, in order to make tMe peoer reasonably 
self-contained, e. considerable amount of material hr-e been included. Th 
procedure followed in this respect has been to give fairly detailed 
explanations of the basic elements, followed by exemplar to illustrate 
the manner in which more complex details can he explained In terms of 
the basic elements. Tbs some procedure has been followed in explaining 
the exermles of t*»«t sequence design. 

K:ny new terms and ccnc*pt« which a* e In standard usage at 
Project Whirlwind are defined in reference 15* "very effort has been 
made to define such terms when they are first ured. An a matter of 
convenience, additional special terms hr.ve been adopted for some of th# 
concepts eririn.' in checking. These ere defined when they are intro¬ 
duced and have been collected for easy reference in Appendix ITT. Some, 
but rot all, of these terms have come into standard usage at Project 
Whirlwind and els©whore® 
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2.1 Ma chine Units 

Whirlvind I (ma, indeed, ©v^ry computer) ray bt> thought of 0.9 
being divided Into four main functional unite: the ropery (or utorare), 
the control, the arithmetic element, and the input-output device (see 
Fig. 2). The memory store* the numerical data required for the solution 
of problems, a* veil it the instruction* (coded into numerical form) which 
govern the actual etepe of problem solution. The control interprets the 
instructions and provide*, the machine with the signals neodsd to perform 
then. The nrit v »etic element actually performs certain elementary arith¬ 
metic operations (addition, subtraction, shifting, multiplication, and 
division) whenever the control supplies the appropriate commend signals. 
The input-output device 1$ the link between the machine end the ©ntsid© 
world; it rrovldes the m- chine with raw data and receives the coirr uted 
r a «ilte. It 1» frequently used to supplement the memory by connecting 
a lerge-oapnelty external memory (having a slower ©roratlas- speed) to 
the rr chine. 

Two different devices a--© used for the internal memory of WVI. 

These are the flip-flor >;nd the electrostatic storage tube. The flip- 
flop is discussed in section 2.111. Thedleetrostatic storage tube is 
a cuthode-ray tyre tube in which the numbers are stored as charged spots 
on a dielectric surface. The final model of t l ls tube is expected to 
hove 0 . capacity equivalent to 1024 flip-flops, thus saving a considerable 
amount of space. Its speed of operation is somewhat slower than that of 
the flip-flop, tut It Is faster than "agnetle tare or drum memories. The 
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control co atria* a sourfeo of 7^ilpea v' ich r.re routed to th rest of the 

computer In accordance with the pettier* of electronic nwltehee. 511p*» 
flops rro used to mni pul ate tV'' Ksunbarn In the arithmetic element. a 
irr°r .t diversity of external equivalent may be connected to the computer 
by nears of the in r ut-outrut element., rhotographlc film Is expsefced to 
be the naln external «torage medium, but it will Vo possible tc us© 
rn-netic tape as veil- It is expected that conversion devices will be 
provided so th -t analogue in format ion may also b« handled. 

P.ll The Basic Featuree 

With t'v excretions, three’basic stomas aroused throughput 
the cor uter; the flip-flor, the gate tube, ? nd the electronic switch. 

Of course, anpl'fiere nre provided wh-^re needed to obtain appropriate 
clonal or irpedance levels. The flirr-fly is essentially a neirory device. 
The gate tube is a sensing device, usually employed to sense the contents 
Of a flip-flop. T v e electronic switch is what its name linmli*-er a nulti- 
position switch which operates at high speeds. 

?.m Th* nir-nop 

The flip-flop is a bi-stable circuit consisting of two vacuus 
tubes so interconnected thr t, at any time, one is fully e r nductlnc end 
the other is completely cut off (?«*«» Fig. 3 ). The olate potential of the 
cut o ‘t tube is "Mrh* (nearly eoucl to the plate suprly voltage), while 
thr t of the c^n-lucting tube is "low” (considerably lees than th* plat* 
supply volte «, tho difference being the droe in the plate load resistor). 
If tube A (see Tig. 7 .) is cut off, the potential at he 0 output is high, 
that at the 1 output Is low, and we s y that th® flip-flon contains 0 , 
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os* i 9 cl‘'.-rod. If tube £ is cat off, the 0 outrut. Is lo% # the 1 output 

is >i£h, joul we say thr t the flip-flop contain* 1, or Is set. % 

applying a positive pule© at an appropriate point in the circuit (tfrfc 

trig^r in it), the flip-flop may he rode to switch lt» Fta'e, i.e.. If 

It formerly cont'ined 0, It will now contain 1, or If It formerly contain' l 

1, It will now contain 0. Thi# aetion le referred to t.n triggering or 

complementing. There nre two additional Inruts vHch require negative 

rulse*. On Is the clear irut, which puts the flip-flo* In the clear 

condition regardless of Its condition before the pil*e was aorlled. The 
» 

ot w er 1* the set ln T, ut, w v ich ou‘« the flip-flop In the set condition 
re&trdleso oF It* rrevious content. The fll'-flop Is often represented 
eyrbollcatly by a rectangle having three lnrut lines and tv output lines* 
ns 1b also shewn In Fig. 3i •'•nd 1* abbreviated TT. ^nch "F in VWI le 
designated by a system number. 

P.ll? The C* te Tube 

The gate tube Is a coincidence devicej It provides an outrut 
If, . n/i only if, two signals occur simultaneously. Its basic element 
is usually a pentode, with one signal being nprll&i to the control grid, 
the other, to the su-rressor grid (see Fig. U), These two gride are blastd 
sufficiently to maintain the tube cut off even when full signal Is epplle 
t<* one (but rnly one) of them, as mentioned above, Itu rrinci-al use Is 
In sensing th« content of a fllr-flop. If It Is d sired to kn*w If ths 
fllr-flor contains 1, we merely connect the 1 outrut to the suppressor 
of the gate tube through a suitable coupling circuit. This coupling cir¬ 
cuit met c'f-nge the d-c level cf the output tut Bust preserve the d^tln 
tion botvoen the two pes«lble voltage levels (roe section P.113)» If th® 
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1 side is high, the surrrr ssor potential will be brought ubov© cut-off, 
and there will be an output oulre when the control grid is pulsed. The 

rf te isenid to he open. If the 1 side is low, the suppressor -/ill uemaia 

below cut-off, und no oitjxit is obtained when the control grid to pulped. 
The gate is sold te b© closed. Thus, the presence of a pul*e on the out¬ 
put line at the tine of senslr^ -ndicntes that the flim-flop con ains 1, 

while the absence of a fils© at t. is time indicate* that it conb.-dna Q. 

The gate tube is represented symbolically by a square haring \vo in ut 
lln*»s and one output line, a* shown in fig. k, nd is abbreviate as GT. 
Each CT 1-I vfrfl is designated by a system number. 

?.113 restoration 

Since the flir-flor. may remain In one position indefinitely, 
its output tokos on the ch* rr-ctertstios of a ri-c signal. Author than 
use d-c coupling circuits, the scheme of peridocially corplomenling ana 
recom^l ©minting the flip-flops wan adopted to r>errit the une of ».-c 
coupling circuits. This scheme is called restoration and the rul >es which 
a”** us'-'d to complement and ^complement the flir-flope are called restore 
pul® s. The restorer-pulses occur in pairs with an interval of 1 -sec. 
between -v -em. These restorer-pul-e pairs are repealed at a fixed ir.iervc: 
(except during the orerat'on of electrostatic storage) of l6 ueeo. ‘.etwee 
the first pulses of successive pairs (the restorer interval). The surely 
of pulsi s to the com uter Is sut/pressed during the In erval occupied by 
the re'-torer-pul*-© pairs, so that operations are not carried out whilt 
the fli'-flos contain the conplementp of the numbers they are suppose? 


to hold- 
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?.llU The Elec tr onic Switch 

The electronic switch caureo only one of ? n gate lube® to be 
open, d«per.ding on the contents of n flip-floms (*pe Ft5» drawn for 
a ® ?). Plat© current for the flip-flop tubes rust, past? through the diode 
matrix tmd all but one of the reel*tore (R1,R?,R3» a|Jd Rl *)• lf» for ex- 
nipple, the right hr-nd tub e of both flim-fieps sho Id be conducting, 
current will be drown through *2, F.J, m d Rb-. Mo current will flew througjt 
V\ because it is con ect“>i only to the left-hand tubes. Thus the up'-er 
line will be at o positive potential with respect to the others"and the 
fRte tu’e corrected to It will he open, while all others will be closed. 
Similarly, a different lias will be placed at a positive potential with 
resrect to the otherp for each different combination of fl ! p-flo contents. 
\n altern- te form of electronic switch, ur'nr g''e tu'es rather th-n a 
diode matrix, is frequently used. 

2A? Simple Combine Hone of basic Stages 

There a e many possible ways of combi ni nr, the basic stares to 
obtain devices capable of performing the functions required in a computing 
machine, l'o illustr te these posslbil itl^s, some of the more com only 
encountered comblmti as will be discussed below. The symbols used in 
the various diagrams are explained in Fir. 6. 

?.1?1 The binary Flip-Flop Register 

A collection ofn film-flop® is essentially a memory device cap¬ 
able of storing an o-dlglt binary number. by meroanently assigning each 
file-flen to a particular digit column of ‘he number, the so-ca’led 
bin- ry flip-flop register is obtained. Three digit columns of n tymical 



ftaport R=177 


- ? b - 


register, the A-r®gl«ter (Aft), are shewn In Fig. 7* Three not* of jy.te 
tubes a**e r-rovlded eo th» t thy number In the register may he examined, 
two set* on the 1 aid®, one set on the 0 eld'd. A pulfn applied to one 
of the seta on the 1 side will cause t v e number contained In the A-registep 
to nr^ear on the outut line* of that set. One set 1* used to transfer 
the number In the A-registor to the Accumulator (0TO5» when the aid line 
Is pulsed), while the other set transfer* this number to the "hue* (GtfOP, 
when the re d-out line is pulsed). The bus may be connected to any cf several 
unite. The set on the 0 side Is used to obtain the "nines-eomplemeut*' 
of the number (obtained by rerlacing each 0 by 1 end each 1 by 0, see 
A rendix 1) for use In subtraction (OTOU, when the subtract line is pulsed). 
The read-in gnte tubes (OTOl) serve us switches through which the baa 
m y be con'acted to the In ut of the A-reglster when a anting signal is 
applied. It might be remarked that the flin-flo s assocli-ted with the 
electronic switch in reality form a binary register. 

?.1P? The Shifting 'erlrter 

A register in which provision has been rade to shift its con¬ 
tents either to the left or to the right le celled a sMftlng register. 

Three digit columns of a typical shifting register, the F-regieter (Bit), 
tre shown in Fir. f. The facility to shift the content of each digit 
colurn one digit column to the left is provided by CTO* 1 and GT05. The 
facility for lifting rlrht is provided by GT 06 end GT07* The mechanism 
of shifting is quite simple. Consider shift left. If a particular digit 
column contains 1, a pulse will am ear on the output of GTO 1 ’ when the 
s v ift left line Is pulsed. Aft»r a slight delay, the flip-flor of the 

>V > 
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digit column to thn left '#111 be pot by this pal?©. If the digit column 
had contained 0, a pulse would ’are been obtained on the output of CTOp 
(instead of CTCU) which would clear the flip-*-'!or;, to the left. Hence, 
tha content of the original digit column would ar^oer in the next digi\ 
column on the left. This p'oc^se 1* carried on simultaneously for <8.11 
digit columns, with some special conventions adopted to handle the 
column® i-t each end of the register. 

P.l?3 The binary Adder. 

All arithmetic oroceeses in WWI c v e performed as a combination 
of additions i n<t shifts. The device which performs the additions in WtfI 
is or lied the Accumulator (pee Fig.9). The Accumulator (AC) is capable 

t . • , 

of a number of ororations other than addition, but we will only discuss 
it a* 8 b nury adder. Consider only TF01 In the column labelad .C15 
(partial eusa) and’. FFO? in the column labeled AClU (carry). Only CTOS 
of aC 15 (partial sum) and CT1? of AClU (carry) are of interest. First 
I-t is ey- mino the bimrjr addition table: 

0 011 



Assume that a muirer is already in AC /aid that the number trntf ined in 
A« is to be added to it. Only one digit column will be discussed (*>.C15)i 
the same process takes pli.ce simultaneously in each digit column. When 
the a- d gate tubes of AR are pulped, the number will nr «? r on the lines 
labeled "from AR". Assume AC15 (’T01) contains 0 initially. If the 

number being added in is 0, no pulre will arpear at the in ut ("from AH") 

* + 

no change occurs and *T01 centimes t- c nrain 0, as it e ould. If the 
number being added V£ s 1, a pulse appearing at the incut will bo apt lied 
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to OTC/6, but It will find 0T06 closed. After o. alight daisy* the pul so 
win beaplled to the trigger inrut of FP01 causing It to cht.n. c Its 
content to X. Thus the correct result Ip also obtained for this eeae. 

Now assume that AC15 (F^Ol) contained 1 Initially. If the number being 
added In is 0, do chnn.-e occurs; FF01 coninuer to contain 1, ao It should-. 
If the number being added In is 1, the pule* will find CT06 open and will 
proceed to pet TTOP of AClU. After a alight delay, the pul re will trigger 
F^Dl of .Cl^ to 0. TM*, again is the correct result, l.e., the sum 1 b 
0, with 1 to carry. The cariy Is subsequently added in to the next 
digit column by applying a pulre to the carry line. TMb uses 0T1 ? to 
sense the carry flip-flop (F?0P). ? v ls second addition ray also result 
In a curry, w>lch would reculr® arother carry pul®e, and so on. However, 
a shorter method has been devised which requires only one carry pulse. 

The met od utilises OT05 and is called the h.lgh-sreod carry. It will 
not be* discussed further. 

?.l?h The h nary Counter 

The binary counter Is Jttrt w hat Its nnm® implies! it counts 

* 

the number of pulses applied to its inrut, indicate* this number In the 
binary sy* em and supplies, if desired, an output pulse when Its capacity 
is exceeded, the counter being returned to 0 when t v ie occurs, a tyical 
binary counter, the Program Counter (PC), bring a maximum capacity of 
?0Ug f I* shown In Fig. 10. Assuming erch fi Ip-flop is initially cle- r, 

*wo lnrut pulses must bo applied to any flip-flop In order to obtain 
an output from the associated GT05. Thus, two output pulses are 

retired from PC6 in ordor to obtain an outmt pulse from FC5. T'ls r 
in turn, requires four pulses from PC7, which in turn, require* eight 
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pulses from PCS, etc. The capacity of the counter is increased by a factor 
of two for c oh flip-flop stage. The number of pulses the counter ha® 
received is indicated at any time by the contents of the flip-flop a, FC1'5 

1 

giving the 2° digit, FClU, the 2^ digit, ot©»,vith PC^ giving tho 2^ 
digits It Je possible to preset this counter so that the overflew pulse 
ia obtained after any credeterro'ned number of pulses (less than 2048, 
of course)» 

2,125 ^he Time-Pulse Distribut or 

It is frequently necessary to perform several different elemen¬ 
tary steps in proper time sequence ih order to build ur a mo* complex 
operation. Thus, if wo have a sipply of timing pulses, we want the first 
one to go to cue part of the cor-uter, the eoeond *ne to another port, 
tho third one to still another, etc. The time-mine distributor accompli Bites 
thin conversion fror a time distribution to a time end space distribution* 

It is a combination of « binary counter and an electro! ic switch (see 
Tig. 11). The out ut lines a e selected in accordance with the contents 
of the counter. The inrut mire, In addition to performing the counting, 
emerges on the selected line. There is no need for the overflow pulse 
In t is tym of operation so th;t no "revision has been made for it. 

2.13 The System 

a .somewhat more detailed block diagram of WVI np-ear* in Hr. 12, 
The intercornectionp among the various units are s^own in detail, a 
16 -digit binary number will be referred to as a word. A word may re- 
present ah instruction or on actual numerical value, words are transferred 
fror one part of the eyiftir to another via a set of l6 cables w’lch rr« 
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cemented to the unite vie. gate tube*. All digits art transferred 

tanecuuly (parallel digit transmission} with a separa*® o&ble being 3*«<- 
cui red for iach, A word is transmitted to the bus from e particular unit 

i 

by pulsing its read-out gate tuts*. A word which is on the tue will >*s 
transmitted to any unit whose read-in gat® tubes are open. Another set 
of 16 cable* (the "chock bus") is provided as a multi pi® check on the 
Hie. % a suitable arrangement of the timing, it is possible to check 
cv si erably mo-e then the condition o f the bus. The other connsetlox*, 
vMc v transmit pul res th>t control the performance of the varlnxe step# 
of th- operation®, ere made directly. Such pulses err called. commands. 

2.131 Central Control 

Central control contains mort of the anl'fv vhich ? re used to 
interpret the instructions for the solution of a problem (see Ilf. 13)• 

It also contains a source of pul«es w’ich eventually become commands. 

The master clock supplies these pulse# in various forms. Tbe basic vxil se 
source la the pulse generator which supplies high-frequency clock rules* 
(HFCP) at o 2 me. r te and low-frequency clock pulses (LFCF) at a 1 me. 
rate. The frequency divider is used in conjunction with the restorer- 
pulse generator (WO) to generate the restorer pulses. Clock-pulse control 
(CTC) deterrines which pulses will be supplied to the remainder of the 
counter during such times ns restoration and the operation of on oujrl- 
li; ry control. The synchronizer provides sli^le pulses at the control 
of a push button. The bulk of the operations ore carried out by the 
time-pul*os which ervenr on successive lines at intervals of 1 ' sec. 

(the interval is longer during restoration and the operation of an auxiliary 
control). The-e pulses are provided by the tine-rulee distributor (TT!>) 
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(see section 2.1?5). Tho program counter (fc) 1® the device which cortairni 
the location of th* next instruction to he performed. Th*» control switch 
(CS) determine*! which oreration io to v e performed by’energizing thf* 
an roprl. te line of the control matrix (CH). Snob line of the control 
matrix opens certain goto tab°B (control puls® output unite)- Mach of 
the r» gale tubes is sensed on a certain time rulse (in some cases, on 
two time r-alree). The puls*® wMch emerge from the^a gale tubes are the 
commands- Thus by setting the control switch to a given position, the 
sequenc" of commands required to perform the operati n determined by 
that position is obtained, h different sequence of oowands 1® obtained 
h.v changing tha content* of the control switch. The program regi'-cer 
{“ ) ie a luffor re *i”t.*>r which serve® two different purposes, to l-o 
duscisaed in section® ?.137 end ?.?1. Stor.-ge selection control will 
be discussed in section ?.1?7» 

?.13? Test Storare 

Tart of the memory of WI consist of 5 flip-flO’ register® and 
?7 ter-le«swtich register® (each canabl© of holding a word)- These re¬ 
gisters are known as tort storage (TT). The 5 fli^-fiop register® may 
receive end transmit words, but the ?7 toggle-switch register* can only 
tr ns it words. A switch must be manually operated in order to change 
the conten a of a toggle-switch register. The re^dsters of terb storage 
are numb-red from 0 to 31* the number aaslgnod to a particular register 
is called the address of the register. The flip-flop re f ";irt©rs may be 
aligned to any desired address by changing cables. A 3^-pOsition 
switch callod the test Bfcorar* switch (TS5) determines tbs register be 
which the tNcV'ne fcan access. If th« corr. nd storage read-out 1? given, 
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the word will be read out of th« storage register whose address eorrespoadi 
to the number contained In the storage twitch. The command storage read-it. 
will re. d a word into the register w)p?e address is in,the storage witch 

i 

(if it bar. ©ns to be a toggle-switch register, the re d-in rrocesn e.nnot 
tcke ploce). 

P.133 Arithmetic Element 

The arithmetic element (AS) i» shewn In Fig. I 1 *, The numbers 
are manipulated in the A-reglster, the ^-register, nnd the accumulator, 
which have been discussed in sections ?.1?1, ?.!??, ? nd ?.1?3* respectively 
Fany of the arithmetic operations require a long-r seouence of commands 
than c r n be provided with the eight time-pulses available from central 
control. The remainder of the arithmetic element (with th* exception 
of erecial-edd memory and overflow, sign control, tnd divide error) ie 
used as nn auxiliary control to provide these commands. C-ae of the 
commands provided by the control matrix on such operations is stop cloclc B 
which ie sent to clock-pula® control and stops the supply of pulses to 
the time-pul*e distributor. At the siare time a command is pent to 
arithmetic control which p rmite it to comrence oper; ti^n. Either LTCF 
of HFCP (depending on the operation) are used to carry cut these arith¬ 
metic operations, when the operation in complete, an end-carry rule® 
which permits the time-pulses to resume is sent to clock-pulse control 
by 'rithretic control. 

Certain conventions have been adopted regarding number re- 

pre r entatirn. These are explained in Art>endix I. The use of the '‘nines- 

co^T>lement , ' to represent a negative number meant*. thr.t the negative -y* 

-15 

of a positive number y is actually represented by ?-y-? in tM e machine. 
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This is perfectly all rigjht for addition and subtraction a® long <® eni- 
around carry is provided. Shifting,»ultii5llc&tioi>, and division sre 
quite complicated for negative numbers if tho * nlne »- co mp 1 etrn-- at * ie 
u®-d. The sign control has been rrovldod #c that thee© operation* can 

be carrried out for tho positive magnitude® of the number* involved 
and the proper sin affixed to the result by complementing each digit. 

Special-add memory and overflow ie racesrary if the computer 
is to have the facility of using: two words to represent e double-length 
number. The a dition of the lees significant halves of two numbers 
represented in tv is fashion may r reduce a carry into the least signifi¬ 
cant digit of the other half of the sum. The special-add memory and 
overflow is used to remember such a carry. An addition of two single¬ 
length numbers which results la such a carry mean* that the capacity of 
the corruter has been exceeded. When such & situation occurs, the 
special-add memory and overflow will surrly an t iara eimal which can 
be us^d t<* ®tO" the errmtation at that roint and provids arm# indica- 

t / 

tion to th" o-'srator, A similar situation can occur in the divide opera¬ 
tion if the dividend!® greater than the d .visor, The divide error 
ie used to provide an indication of this situation. 

P.13 1 * In ut-Cutrut Sieniont 

A block diagram of the inrut-out'Ut element is shown in fig. 15 
Verde are transferred between the ln-out regis*er and the external equip¬ 
ment on corrr ends supplied by the external equipment. When ^uch a tranafer 
la to take pi ce, the cor-'and ator cloc k ie sent to clock-pul control. 

"hen the transfer is convicted, an in-out control end-carry "ulse is sent > 
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to clock-puloe control to perr! % the time-pulses to resuato. a rot her 
complicated system is provided to permit the corruter to operate at the 
sane time ae the external, equipment. The comparison register is used ©« 

1 

a built-in check on the operation of the in-out register. Its or®ration 
will he described in section 5.12. 

?.135 Ballt-In Checking 

It was mentioned in section ?.13 that the chock hue hn« been 
rrovided to check on the transfer, of words vie the bus, The cheek re¬ 
liefer 1 3 used to compare th* vorde transmitted by both buses. When ® 
word is transferred from unit A to unit B via the bur, it is alee trans¬ 
ferred from unit a to the trigger inrut 9 of th® check register via the 
check bus. If the check register was originally clear,, it will receive 
the word th t wr.e transferred. Some time later, the word received by 
unit P is transferred io the trig, er inputs of the check register via 
th® bus. Ko provision is rnde for carries. If the two word* are the 
same, the check register will contain 0. The gate tube* on the 1 tide* 
of the flip-:lops are s-nseft. If any of the flip-nors contains 1, an 
out ut also is obtained* This output pulse 1* sent to the alarm iin¬ 
dicator and is also used to atop the supply of pulr®« tc the comruter 
(with the exception of restorer-pulse* and the pulses repaired for electro 
static storage). The alarm indicator provide* visual and aural indica¬ 
tion of tho discrepancy. Ai^rm pulse* ray also be obtainsd from other 
parte of the computer, such :*a the divide error, the in-out element, 
and the special-add memory and overflow^ 

?.13S Tert Control 

The operation of the cor uter is controlled by a number of 
push buttons loo:ted in test control. With these push buttons and some 
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toggl® switches, it is poer.ible to s^t ur> any initial conditions that 
may be required to operate th® eosimter. A. single atop of the proMer 
can he performed using another tush button* Te«t equipment is prcrr.:' r. 
tc eet ut) some asocial operating conditio: a that have been found JS'oful 
for testing purpoeet* 

P.137 Electrostatic Stor re 

The bulk of the memory of WW1 will be provided by electro- 
static storage tubes (!'.ST). It i« ultirately expect-d to hove a capa¬ 
city of ?04F words. It ia convenient to think of electrostatic storage 
( T .S) as being made ut- of registers having address- e ranging fror o to 
P047* Stor re selection control deterrines whether KS or TS i# to be 
used. If both arc us--d simultaneously, the address-'s from 0 to 31 must 
be assigned to TS while the addresses from 7? to ?047 must be assigned 
to rS. Ths program register is used as a buffer between and the rest 
of the com-uter* .Vhen a word is transferred to -15 It is actually trans¬ 
ferred to the program register. A subsequent corn-end 5 write will stop 
the supply of tire-pul<i*« n-i restorer-pulses and will start electrostatic 
stor ge oontrol (ESC), The word in RR will be transferred to the poei*. 
tlon in -'S corresponding tc the address contained in the KS decoder (bS^) 
(it is similr in function to TSS, but it is not a switch) under the 
crntrol of -^C. After Vis transfer has bsen completed,nn 8S0 end- 
cerry is sent to CFG v ich will pep* it the supply of tine-pulses and 
restorsr-rulres to ts resumed. 

?.? Machine Cycle 


The period of time required to fill the counter of the TFD 
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whssa starting from the clear condition will be referred tc -* the machine 
cycle. During this period, the corpu -nr performs on* operation and pre¬ 
pares to perform the next operation. 

* i 

P.P1 Frogram Tim l ag 

The series of commando necessary to enable the oorr uter to pro¬ 
ceed from one operation to the nert la known cs progrn*' tinlng (see Tig® l6'l. 
For convenience, a separate line of the control matrix Is used to gate 
open the mroper commands. Nearly all. of th r * <v ©ration lino? are com aeted 
to the program timing line? Those which a-e not com acted to this line, 
are nevertheless connected to those gate tubes which provide the commands 
essential to sequencing. Program timing -provides some additional commands 
which are common to ne rly all operations (there additional comm&nue d© 
not Interfere with any of the operations which do not require them)„ He 
will discuss only thr t portion of program timing which is essential ^o 
sequencing. Sore of the cor-.-.nds are concerned with checking the transfer 
by use of the check regl«tnr. 

On time-pul re ? (TP?),the con^rnds PC read out end 5S re.-d in 
are given, both TSS and V . C D will receive the address contained In PC, 
but S'-C will determine whether TS or r S Is used. In order for the read 
in to rive the c©' ect result, both TS? and FSD iru*t be clear. This will 
have been accomplished ay the com-and SS clear on TF1. On TP4 # the word 
confined at the addross specified by TC is transferred to Ffl. This 
transfer is direct if ^*5 is used, but requires the command PP read In 
If ?S is used. TTU also clears CS after a 1/? usee. delay, Thle energlzey 
the line w' lch controls the rl_ operation. T' Is operation does not have 
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program timing, but the command® w ich occur on TP5 of the yt aoera.fcS.oa 

ur® an essential part of program timing# The command ® FP read oat , 

OS r»&& in. end SS read in are given on TP 5 of ri. Thl'a re suite !n C3 

being set ur t' perform the cremation spscif'ofi at the address v'i ch was 

contained in PC at At the sane tine, SS is set up so th’ t the correct 

operand will be available from stort *, The comrands nrcefisary to perform 

the part lea’’ax operation are obtained starting with TF6# Inasmuch os 

will not be changed until TPU^ of the next machine cycle, it ie poceiilo 

. / 

to use TPl to TFU for obtaining there eorr-cnra. On TP7 of program timing, 
the address csntrined in PC is increc sed by 1 by the comrand add to PC ,, 
Thus, on the next m*chine cycle, the instruction contained at t'le new 
rddrese will be performs id* 

Flexibility in the choice of addressee for successive orders 
is provided by a sped;1 cremation, subnrogroin (eg). Th« jt£oreroiioa 
chan ee the contents of PC to the number specified in its address seofcion* 
An additional operation, conditional program (co) which makes such a change 
conditional upon the si n of the number contained in AC (if the number 
Is negative, tbs ch. n^ is made; if positive; it ie not changed), permits 
the m chine to choose it* own computing routine on the basis of the re sol it, 
of some computation# 

?.?? Ot-pratlon Timing 

The series of commands which are concerned with actually ct rryla 
out the 0 -erstion specified by the part'cular setting of CS is called 
operation timing. As an example, oporatlon timing for will be dlscuasec-. 
The address contained in PC at TP7, indicating the register containing 
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the lnstruetl on. which would ordinarily fellow, le transformed to AR, 
vhe-“ It ie available for further use, if desired. Thu?;, aR is? cleared 
©a TP 6. On TPS, the commands PC read out and. AP read In transfer thd*. 

i 

address to A l> . On TPI5 )./? (TPP delayed by if? Msec.), PC {.• cleared. 

The address specified In the an Instruction is still contained in PR 
(It vas there at TPh of program timing). Hence, on TP1, the corn-rand* 

PR ro; d out and PC reed In transfer the desired address to PC. This 
address will be read out of FC to S'? on TP?, thus the next 1 nstructios. 
will bo obtained from the address specified In the sp_ instruction. 

?.3 Programming end Coding 

The term r-rog-amml ng Is used In a gener-1 sense to indicate 
the rsrecess by w leh a problem le prepared for solution by the eomuter. 
Coding Is a much nor* sr>eclfic t«rm referring to th< step fin which the 
problem is stated in terms of operations which the com uter* performs, 
hen a problem hat been put in this form, It Is referred to as a coded 
program, ’’e shall be mainly concerned v/ith coding in this thesis,, a more 
detailed discussion of coding for WWI may be found in reference l6. A 
correct summary of the basic Information has been Included In this thesis 
as Appendix 1. 

?.31 Nomenclature 

’•’e have previously defined the term word as a l6»dig1t binary 
number. If the word is interpreted as an instruction, the first (left- 
hand) 5 digits are the coded repressnti tion of the operation to b« per¬ 
formed. There gre "}? operations possille with this rtrman’.ion. In 
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m?t case?, the last 11 digits indicate the address of the errand* 

’■then TS is \;.sed, only the last 5 digits specify the address. When the 
operation code specifies a shift, the last 5 digit" ind*ca;ee tte ex. «*>>,. 

for convenience in writing codes, two-letter abbpevietions hare been 
adopted for each operation {e.g., «£_, cp_, ri^, ca, ate.) » Another con¬ 
venient notation ie PC(x), which indicates the address of the re-iet^r 
containing x. The symbol CP. (y) indicates the content® of the register 
whoso address is y. Thus, the combination of symbols ca 17 C(x) represents 

an instruction which will transfer the contents of the storage register 

/ * 

containing x to the accumulator. Of course, it is necessary t© assign 
e specific address to the register containing x before the Snotructler 
cen be used in the commuter. If x were put In regir'er this instruc¬ 
tion v'-uld he written ca 31® in the mac-iae, this ve Id. a' gei r as 
1000000000011111 (10000 ie the code for ea). 

The computer distinguishes between a word used as an instruc¬ 
tion and a word used a3 a number on the basis of the time in the r* chine 
cycle at which this nunter is transferred from stor*re. "f It is trans¬ 
ferred on TP’u and TP5 (via the program register), it will be treated *.» 
an instruction. At any other time, it will Te treated as a number. Thus 
it ie possible to mnipul- te an instruction as t v ough it were a number. 
Indeed, it is a very com> on practice to do just that in progreunming (sac, 
for example, reference 3)® 

?.32 The Operations 

The operations which h've been accepted for o^rmnnent use in 
WWI are listed in Appendix I. A brief description of each ie Included 
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ther*. In addition, ther® as** a maber of operations which hav* bam 
temporarily wired into the control matrix. The®* operation* are di«ti:a« 
mulshed "by a two-letter code in which the first letter is q. One :.v 
the*e, ££ (check), will he used very frequently in thia thesis. Xt 
corpareg the contents of th** storage register indicated In Sts address 
with the contents of the accumulator,, The cerrurisoa is carried out 
in the check register in a runner very siriier to checking ef th<~ bus 

i 

transfers (see section An alarm is obtained if the words do not 

etfr° 9 * T v ourh £C is only a temporary orierntion at present, it seems 
very likely th t it will la mad® a permanent operation-. 
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3 • ~ L Clfi-gg ificatlon of 3'aA lures 

Each stagy in the computer must perform certain clearly defined 

functions. Its ability to perform those functions depends on many fac¬ 
tors. These factors generally vary with time In an Irregular fashion. 

The status of all these factor* at a particular instant will determine 
whether the stage can perform one of its functions at that instant. A 
failure need not be present at ell times* However, if It is net present 
during a checking process it will not be detected, Thu®, the nature of 

the factors causing failures and the degree to v'lch they can be controlled 

11 

exert an iirrortant influence on the process of error detection. It it? 
helrful tc classify failures according to a scheme v'ieh indicates t>is 
influence. 

3.11 Steady-State Failures 

An irreversible change in one or more factors w’ Ich renders e 
stomu v rmanently incapable of performing a function is celled a ote dy™ 
state failure,* The stepe will consistently yield the same incorrect 
response at every aprllcrtion of the signal. A typical eynmnie i c an 
open cable; it can never transmit a pulse. However, it must not be con¬ 
cluded that a Permanent failure of a component, is necessarily e steady- 
sta*fe failure of the plage. If a resistor used to terminate t coble 
s’ould become open, a distorted pulse waveform would remit, Vhether this 
will cause a failure depends on several other factor® vHch ne^d. ret always 


be unfavorable 
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3,1? Dynamic Tail ure a 

Closely akin to the steady-state failure, though somewhat mors 

21 

subtle in its effect, in the dynamic failure. The di,’eiirguishing factor 
is thr.t it appears only on certain aprllcatiens vf the signal. It may be 
thrt a coupling condenser will charge slightly awry time it passes a 
pulpe 0 If there Is not sufficient time for it to discharge between suc¬ 
cessive puls' 8, the chargo will continue to build ;ve. The amplitude of the 
outrut pulses will decrease as the charge on the condenser increases, even¬ 
tually the outrut mlee will be too small to drive tns next stage. This 
effect Is referred to r* FRT-sensltivity (pul«e-repetitionfrequenoy) anti 
is an example of a dynamic failure. The oven terminating resistor referred 
to in section ?.11 might be a dyne mi c failure or it might rot be a failure 
at all. another interesting example of o dynamic failure ^tfund in the 
operation of WWI (after considerable effort) wee the result vf "ringing'’ 
on a d-c power supply line. The various supply linos have be«.n provided 
with LC-filters to prevent the coupling of pulses between tire-Its. The 
current surges w v lch accompany the switching of vacuum tubes cause the 
filter circuits to oscillate or "ring" with a fairly smell enrol H ide. It 
so happened that the timing of a problem was such that Si^the fourth tire 
a particular pulse occurred coincided with the peak of this oecil 1 i.‘,ion< 

This was barely sufficient to interfere with correct operations indvsd 
an error did not always occur on this pulse. This failun vae not doe to 
a defective component; it was a design weakness which, in ell fairness, 
the designer could not have been expected to anticipate. 
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3-13 Inci pient f ailures 

S-.nw* factors charts In a ©ontSsuout! faeMoa. fur iNaaxri*.- 

» 

the C'-.thcd® eir-lesion of a tube tcnae to decrease |-rad«ali;r a® it apt-a, 

“ventuolly, the chanra will b va ^ rogrersad to a point where cerreci 
operation i® no lon^r ro®®!!!® and a et''*uiy-flt&te feilun will OTlt>t,. 
Tofora thl • r,oint 1® reachad, the orerntlon of the stage bee or<o* jror<t 
sensitive to other frotor®. An Incipient failure 1® said to exist/ ’ 

Slight v rif tien* la son* factor* would not cause any failure® In a «t&f?ea 
vithnut an •‘ncirlent failure, but th«*e variation® would oau^e failure* 
whan an indolent feilur# i* rreeent. Airing effect* are fond in all 
crr-onentu, but nr*> nore pronounced in tub®* end crystal rectifiers 
1.1U Intermittent failure® 

Trerue-tiy a etapo wil 1 be abnormal y sensitive to : factor 
w v lch fluctuate® in a random fashion. Tie sensitivity i® not the re- 
oult of a orofresplr'* deterioration nr is the sensitivity exhibited by nr. 
Incirient failure, but i® iro:e or le*r constantly present. The Mph coiv- 
tact resi'-tance cresent in & poorly soldered Joint irlfht be a cease of m: ■' 
sensitivity* The failure will a^rear at irre^ilarly spaced Interfile, 

Such a failure Is called an ’nterrittent failure.^ It i* quite eirilar 
to the incipient failure in a-r'enrance, but net In cause* 

3.15 Reproducible failures 

Another tyre of failure v>ich 1* irajal ^ewted at l rret?ilsrly 
spaced interval® is the reproducible failure. Ite ierediite cause is 
an external disturbance of pome sorts mechanical vibration®, pretence 
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of r-f radiations and th® Mice* Cf coupe©, fcher® aiu?t be c;om<? other 
factor w'-ich- mtdca* the sing© 8®naltiT© to thee© di sturbansee, hat it 

i 

overate very satisfactorily a« long as the disturbance, is not present, 

Ry artificially causing such disturbances, reproducible failures may be 
mde to occur whenever desired, and hence taka on the characteristic® of 
wteady-stata failures. 

3.l6 Random Failures 

Still another failure appearing at irregularly spaced interval* 
* 6 

In the random failure* It doee not require an abnormally sensitive stag 
for its occurrence* It generally results from an unusual combination of 
unfavorable conditions among the factors which arr subject to variation* 
It may be due to an exceptionally large variation of one such factor, 
e.g., a power line transient far exceeding the normal lim te. Although 
there is always a cause for such a failure, it remains unknown ±0 the 
ererator. 

Jo? Checking Considerations 

J.®1 influence of Various Tyres of Failures 

Test checking may l 1 ® regarded as an err? ’•imentall procedure for 
det»rrining the ability of the crmv U t*r tr function orcperly. If the 
ability should change during the course of the experiment, it becomes 
difficult, if net impossible, to interpret the results in terms of the 
conditirn of the commuter* It Is quite possible to obtain the correct 
solution to a problem even though dynamic, incipient, intermittent, re¬ 
producible, and random failures are present. In short, test checking is 
applicable to only steady-state failures.** In designing test sequences. 
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no consideration meed be given to any failures which are act essentially 
steady-state failure*. However, It has been noted that dynamic, ir.cip5.e- 
aad reproducible failures eve very closely related to steady-state failu ■■■;. 
If supplementary mans can be found to convert these tyres of failures Iv >0 
steady-state failures during the performance of the tost seqxtencoe, test 
checking may be used for their detection. Of course, if an intermittent 
or random failure should occur at an opportune time, it, tro, would be d. - 
covered by test checking. However, mathematical checks are much rrora ef¬ 
fective in dealing with irregularly spaced failures. 

3.?? Operational Effects of failures 

Centra 1 ’y speak’ng, 0 failure in a *ta~* causes it to 1 o°ft its 
ability to perform a certain function. The problem of designing a check. ;g 
sequence may be stated in terms of these functions} the checking sequence 
oust reouire each stage to perform el' such functions. One of the first 
tasks, therefor®, Se to determine these functions for each of the elementary 
stages. It Is not necessary to consider each component failiire for thia 
purpose, :s will become a ’•arent when it is done in sections }.??1 to 

’/hen It is desired to us® a problem for trouble location, a no;*® 
detriled knowledge of the crernt’onal effects of the failures Is retired. 
The actual response of the faulty stae rust be known. T ; is Is an im¬ 
portant practical distinction between checking and trouble location. 

It would perhaps be well to restate this In the form of the questions 
which the designer rust ask In erch cases 
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Checking! What Biusfr the stage do? 

Trouble Location: What will the stage do? 

Some of the answers in typical easee are given belo'w. * 

3»??1 Amplifier!* 

The function of an amplifier Is to provide an output of the prop* 11 
arrrrlltu.de to drive th® succeeding stage® when the appropriate input signal 
ia arnlled. The output amplitude may lie among a wid® range of valuer 
when a faulty component is present. The particular amplitude level which 
1* obtained vlll either be capable of driving a succeeding bi-stable stage 
or It will not be capable of driving it. Since the outmt will ultimately 
be arrlied to a bi-stable stage, It may be said that the amplifier will 
not suprly any output ru]*e if a failure exists. This doe? rot mean that 
the actual anrlltud# is zero, but that It might Juet as well be zero as 
far as its eff ct on the'operation of the compiler is concerned. If the 
output ie capable of driving the succeeding stage, no failure exists. 

It is, of course, possible to obtain an rut ut when no in^ut 

« 

signal Is applied. However, there is no way of 'redictlng the relation 
of the times of occurrence of such spurious pulses to the timing Of 
copruter operations. Thus, failures of this type are essentially Inter¬ 
mittent and need net be considered. As additional justification for dis¬ 
regarding them, it s’culd be noted thft such failures are extremely rare 
in well-designed amnllflera. 

To summarize this discussion, the two ouestions of 3•?? will 
be answered. An amplifier stare mu*t -provide an output whenever the appro¬ 
priate signal Is applied te the innit. If e f»ilu-» exists, no output 
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will be obtained when e el goal is appli sd to the iirut. The oxtrsK© 
simplicity of thsf-e conclusions tends to belittle their importance. Cer¬ 
tainly they are intuitively obvious, but they suet be clearly realized in 
designing test sequences. Hole that ths failure of the amplifier may be 
due a large number of cause* (open fila:j)ont,op*a plate load resistor, 
grid-to-cathode short, ©to.), all of which exhibit the same symptom. 

3•??? fiat© Tubas 

The gr t© tube can fall in thresi ways; 

1. An outrut nulse 1 b obtained without eoincldont inruts. 

?. To output rul*e Is obtained for coincident inruts. 

An outrut pal''* is coupled back to an in ut line. 

Case 3 extremely rare if care has been riven to the layout. Further- 
rore, it Is ccrrlete'ly ‘armless if the Irrut line l c driven by an ampli¬ 
fier, as 1 b often true. TMs cas* 1 will therefor© not be e‘n«idered In 
t v ia thesis. Css© ? is mite rossihle and fortunately, is amenable to 
easy analysis. Tm possibilities must be’considered under case 1; the 
output pul^e is obtained without any input or It is obtained with only 
one in-ut. The former possibility repre^ante an oscillatory condition 
wMch is extremely unlikely. If it should, exist, it would be extremely 
difficult to determine ths times when a spurious mils© would occur. It 
would take on the characteristics of an intermittent failure, so th? tit 

need not be considered. The latter possibility also may result in epurioul 
puls'* at indetermlna•e time*, which, again, need rot be considered. 
However, in the usual amplication of the gat© tube, a signal is applied to 
one in-ut to determine whether the rther in ut in energised at that time. 
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It is quits possible that the gats tube will pjovid© an output oul m v 101 - 
ever this sensing signal is applied, even though the other lnnit in not 
energized. TMt is a straightforward manifestation arid will he considered-. 
To flurr arize, it will be assumed that to the failure of a gate tube coft 
exhibit only two possible effects; 

1. It will never provide on output whan a sensing signal is 
applied. 

?. It will always provide an output when a sensing signal la 
applied. 

?.??3 mp«nops 

The function of the fli*-—flop 1* to receive information from aa< ! 
of three inputs and to retain such information indefinitely. A faulty 
component may cause it to develop a rreferred position* l = e., it will net 
regain in the other position indefinitely, though It will remain in tha 
preferred position for any desired period of time. One® amain an indeter¬ 
minate time factor arrears in the consideration of the effects of failures.! 
the reriod of time a flip-flop can held the non-preferred information 
before reverting to its preferred state. If this period is longer than 
the time it Is required to held the non-preferred information, this 
weakness will not h ve an. adverse effect on Its operation. The longeot 
interval between ’-estorer-pulse pair# is the maximum, amount of time th?.t 
c- flip-flor would be required to hold one stae. However, for reasons 
w’lch tre not fully understood, fll^-flors hare been observed to revert 
to the preferred position pven though repterar pulses are used. Some 
assumptions must be made regarding the effoots of failures of this ty*-© 
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or soaputsr operation when to trouble location is considered* Reve *v -l &■; 
the checking requirements can be clearly stated? 

1* It must receive and retain a 0 vie. the .clear input 

1 

?. It must receive end retain a 1 via the pet inmt 

}, It must receive and retain e 0 via the trigger inrut 

h e It met receive and retain a 1 via the trigger inrut. 

* o ??U Restorer Pulse s 

The lone of restorer pulses in pome pert of the computer i» 
another typ* of failure which doea not lend itself to a simple analysis. 

If the contents of the fllr-flops are changed at sufficiently frequent 
intervals 9 the charge on the coupling condensers will probably be main¬ 
tained, so ttofc correct operation, will continue. However, this is not 
likraly. When a flip-flop remains In the same position lone enough, the 

suppressor of its sensing gate tube will argum the potential of the point 

to which it is returned. Those g?te tubes in which the suppressor are 
returned to ground will he open, regardless of the condition of the flip- 
flops. Host gate tubas are designed this wry. Those gate tubes in which 
the surpreeaor are returned to -15 volts will be closed, regardless of 
the c-nditioai of the flip-flops, ^ead-in gate tubes are -enerelly of 

t'ia type. The eema symptoms will, of course, a~rear if a flip-flop is 

not capable of responding to a signal at' the trigger input, for it is 
equivalent to the loss of the restorer-pulse supply to that flip-flop. 
Effectively, these failures may be interpreted as flip-flop failures In 
which: 

1. The flip-flop appears to contain 0 and 1 simultaneously, 

?» The flip-flop arrpears to contain neither 0 nor 1* 
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Because restorer pair.as play such a vital role in the or ©ration of the 
computer, it may he well to include eome built-in device to indicate the 
loss of restorers at some critical point (or points) .; This subjc 
cannot be discussed any further in this paper# 

'*3 Marginal Checking 

A very useful technique adopted by Project Whirlwind So th® 
provision of facilities for the variation of d-e sup ly voltages to varlov.* 
parts of the computer. Tha variation of these voltages is a powerful 
adjunct to other cheeking procedures# Dynamic and. incipient failures 
can be converted into steady-state failures through its use. It helps 
simplify the problem of trouble location# The possibility of removing 
a deteriorating component before it causes a failure In computer oreratioj- 
ls enhanced by this voltage-variation scheme# 

A variable-volte.?® generator is provided which may be rl*c®4 in 
series with a number of the d-c supply lines, bach of tbe«e linesaipplies 

a rather limited mmber of stages. A telephone dial fray be used to scloeD 

\ 

the line on which the voltago Is to bo varied. Manual control of the 
variation is available within the limit Imposed by the generator cl»rac« 
terifltlcs. In addition, there is provision for automatically switching 
the generator into each line in sequence and enuring the voltage to h# 
varied within predetermined limits before switching to the next line. 

There limits may, and generally will, be different for each lino. It Is - 
possible to both lucre? r® and decrerse the voltage. Sines only a limited 
number of stages is affected by a single voltage-variation line, & 
considerable degro® of trouble location may be affected through its us®. 
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Fes- example, If an incipient failure under normal voltage Is converted, 
to a steady-state failure by v> rying the volfcfge on o particular line, 
the trouble Ip associated with one of the stare supplied by that lica. 

In general, there Is r. certain maximum tolerance (both port tire 

0 

and negative) In the supply voltages of each stare ^vMch ie determined 
by Its design. A. tolerance will be ar-eoclated with each supply line® 

T*-is tolerance Is some function of the Wprances of the Individual stage* 
supplied by It. These tolerances ore called margins. w ben a stage is 
operated very close to its margin, it becomes much more sensitive to 
fluctuations in the factors which cause failures. In particular, dynamic 
and incipient failures show much more clearly. Deere; sing the screen 
surrly voltage on an aging pentode tends to accentuate the decrease in 
oath do emission. The mints current decrease in a normal tube may be 
sufficient to cause a steady-state failure with & nergln of -5° volts; 
for an aging tule, the r argin at v ; lch a steady-sta'o failure e."rears 
ney bo only -15 volts. 

!he$“ facilities re,” be used to measure the margin on each 
line by varying the voltage to the point at which a failure occur®. Ry 
measuring the actual margins at regular Intervals, considerable informa¬ 
tion Is obtained regarding the effects of aging on the operation of the 
cn -uter. V.*hen margins become unduly low, it is time to rerl.'ce the 
offending component. Skilled p*rson*el contend that tha trends of t v iB 
data often indicate the faulty component quite accurately. They h*ve 
proved their contention on a number of occasions. Thi© -procedure of 
checking the margins has given rise to the term marginal checking to 
refer to the u=e of the voltage-vrrtotion facilities for any purrcee* 
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It ie meaningless to quote the margin available on a given 
volt’, gc-variation lice without specifying the conditions under which it 
wa« measured. No failure would be obtained at any veltr.gfi If the \ ts.f'e a 
surplled by that line were not In use. One standard eat of conditions 
Is the complementing of all flip-flop* at a fired rate, determined by 
an external pulse source,, This 1* used only for the marginal checkir,?; 
of the flip-flop** By observing the indicator lights, the margin at 
which each flip-flop fail* to complement can be measured. This techilqu*. 
has proven quite effective. No equivalent teehnloue has been developed 
for other tyoes of stare*. It is necessary to design -problems w v lch 
utlllve the stare undergoing volt.- r«-v rlotlon. fuc' study must bo 
given to the coordination of marginal checking with test chocking. 

The fact that marginal checking ray he used to predict the 5a,- 
minent occurence of e failure «u-rest* th; t it ray also he used to pre¬ 
dict th; t no failure* will occur for sore definite period of t'me (tie 
prediction interval) if th* margin ie greater then some predetermined 
vrJue. There is not yet sufficient evidence to justify this conclusion, 
but it does seem plausible. Of course, t 1* conclusion cruld only ar- ly 
tr steady-state, dynamic, and incirlrnt failures. By. providing f^me 
apparatus to produce suitable external disturbances, it might be po*- 
sible to extend this reasoning to reproducible failures. If the exif- 
tcnce of a reasonably long prediction interval can he demonstrated ex¬ 
clusively, test-checking procedures would bo considerably more attractive, 
An overall check problem could be performed at regular intervals (some¬ 
what shorter than the prediction interval) while each eu-rly line wa* 
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varied through the range required for the prediction to t© valid.. If 
the probler Indicated that no failures were present, it may b«» concluded 
that problems solved during the’remainder of the prediction intervvj 
are error-free, provided that gome mathematical checks are included to 
guard against intermittent and random failure*. If the prediction 

i 

interval, were long compared to the time required to perform the check 
problem, the loss of time inherent in test-chocking procedures would 
become negligible. 

3.4 Summary 

Te*t-cheeking procedure* are only effective against steady-eta;s 
failures. However, by us® of *up-lem c ntary mean®, many failure* say be: 
converted into steady-failures. Those which ernnot be converted 
are sufficiently random to be detected by mathematical checks. For 
puroos-s of te^t sequence design, it may be assumed that only steady- 
state foi lures need be detected. Ts use a sequence for trouble location, 
it is necessary to determine the results which will be obtained in the 
presence of all possible faults, vach fault Is assumed to be manifested 
in a clei rly defined manner, although this ia by no means accurate. Those 
fults which do not exhibit clearly defined effects nr© gnerally suffi¬ 
ciently rare to justify their being neglected. Furthermore, if such e 
peculiar cc.se arises, analysis on the basis of th<-"sa assumptions should 
lead to contradictions, thus indicating that a special case is involved. 
However, these assumptions do not elirin tc the neod for further study 
and classification of cor.outer failures. Perhaps such study nay* lead t; 
a more satisfactory treatment of tort checking. 
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b.l Object ilvesi 

«1Mr«W HK jawj’WOMMK a 

Kethode of improving the reliability of computing n chiaavy 
will be in denwnd a» long an there is a ne«d for comru.te.rso At proeeftt, 
the demand for such method* is quit® pronounced. The rain emphasis is 
towards developing techniques wich give useful results as soon as pos¬ 
sible, even though they le ve something to be desired. More elegant and 
effective methods will be required In time, but the Important thing it 
to keep the computer operating with a minimum of laborious.maintenance. 
Trouble-location technioue® are of more immediate interest than check* 
on the overall results. The ultimata goal is twofold: 

1. to oHfin a compact, overall test problem, coordinated with 
marginal checking, which will Indicate th- t ev^ry stare of the computer 
is working rrooerly (barring the inevitable exceptions) and will continue 
to work rroperly for the prediction interval. 

?. to obtain a collection of test seauences which ray be used 
(probably in conjunction with 'arginal checking) to locate the sourc«s of 
any failure vMch is present with an little ambiguity as possible. 

This thesis is ralnly concerned with the second of these goals. 
However, it is felt that some insight into the design of an overall check 
■nroblem can be gained by studying the checking of small units. In addition, 
the results of such & study can also be trolled to trouble location. Thu*, 
the rain objective of this thesis is the development of n systematic method 
of designing te^t sequences for checking relatively small units in coor¬ 
dination with marginal checking. A secondary objective Is to discover 
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ihone limitations of test checking which might require the use of ethar 
checkinr Procedure*. 

» • \ 

* 

U«? History 

F. I. Flumenthal and C. C» Kobnrg were the first men to study 

5 

the rroblem of teat sequence design in detail. They were concerned 
with locating certain types of steady-state failurea in the Five-Digit 
Multiplier, the prototype of the Arithmetic Element of Whirlwind I. They 
considered only single failurea which ;<re equivalent to the removal of 
some vacuum tube. The rrocedure they adopted is quite straightforward. 

It consists, essentially, of tabulating the functional abilities lost 
upon the removal of e cb tube. Generally, tbia tabulation will suggest 
a secuenoe which will detect the presence of the failure. For example, 
sur-ose th; t a nr.rticular failure vpjld render a flip-flop regirt^r in¬ 
capable of receiving a 1 in digit column 15 « The sequence for checking 
for tbia fnilure is almost self-evident. Pead v. word w‘ i ch conteine l 
in digit column 15 into the register. Read the word received by this 
register to a conptrieon unit (such as the cheek register). Compare the 
word in the eorparleon unit with the word originally read into the register. 
If they agree, then the particular failure does not erlat (every other 
rert of the copi’er la working- properly because of the single f&ilt as¬ 
sumption). If they do not agree, then the failure exists. However, 
these men utilised sequences of commands rather than operations, thus 
severely limiting the practical anpllca'lllty of their results. 

G. C. Sumner recognized that infornat’on is routed aloi *5 certain 
clearly defined channels in many typical computers units. He conceived 
of a method of trouble location analogous to the conventional procedure 
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of vlgml tracing. The tert sequence would set ur the unit so that the 
Information would, be routed along a particular channel, 0 imply infonna- 
tion to the infut of the channel, and check - that the appropriate inforwa-' 
tion appeared it t.he output. He designed a few sequences {using ccsrandt’', 
tc illustrate the procedure, assuming only single failure*,. 

^.3 Proposed Procedure 

The computer will be suidivided into extremely small sections® 

A method will then be developed for desi'-ning 0 test aequrnce to cheek 
any one section, assuming that all other section* are working properly® 
Modification of the procedure to Include multiple faults will be con¬ 
sidered® The use of the sequence* for trouble loeftdon will be discussed., 
! *o31 Subdivision of the Computer 

A section consists of /fll stages which are sup lied by a single 
volt ge-vari; t'on line. This su’division of the computer automatically 
coordinates the t*>rt sequences with marginal checking. Of course, most 
stages require more than one d-c voltage supply, and it frequently h&prensi 
that the seme section cor-ebponds to several voltage-variation lines® 

Thus, there are less section* than there a r voltr-ge-varlation line*, and 
one test sequence can be used with several voltage-variation lines® This 
rehod of subdivision also helps create a firmer foundation for the single 
fault assumption. It is more likely that a fcilure will occur in a 
section undergoing vcltare-voriation than in one whose ea ~ly volt ge is 
normal, particularly if the periodic checking schem- discussed in section 
3®3 (in connection with the prediction interval) is used® 
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4.32 The CharjiQl Concept 

The picture of c 1 early defined chonnsts of information f 1 ov 
conceived by Sumner (see section 4,?) pay he rowdily generalised to ix -- 

1 

elude the entire ccmruter. Information arriving; at the input-ouit/tit 
element le routed to storage. From store.?® it ray be tranomitted to the 
arit v metic element, wher*' it may be combined with other informal ion to 
form the desired information. It is then routed to the Jn~ut-output 
element via storage and made available to the operator. Another possible 
charnel takes the information from storage to control, whor it may be- 
used to manipulate other informtion in the computer. Th® pathe traced 
out in this war' con become very comrley, esoeoially since the informa¬ 
tion frequently undergo* transformation end mry frequently be used to 
determine its own route. Hany channels may coincide for several staffs. 
These cerrllcations rake Sumner's idea of autumn tic signal treeing untena 
when arrlied to the whole com r uter 0 The practical difficulties involved 
are very nearly insurmountable.. 

However, it is very useful to consider a segment of a channel, 
Essentially, Sumner considered those segments which were within each ef 
the ty ical units that he treated. E s ch ef those segment? could con¬ 
ceivably be shared by many different eh rain els, Blumenthal and Hoberg 
also considered channel segments, although they ray not have been aware 
of it. Their segments consisted of single vacuum tubes. The channel 
segments to be considered in this thesis will be t'ose w v ich rrre within 
a given section. A channel segment will be defined as a rortion of a 
ch nnel which Ip Included within a given section and includes all stares 
in that section vMch are mart of the ch: nnel. In specie! cases, this 
definition may reduce to that of Sumner or that of Blumenthal and Hoberg, 
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It 2« not necessary to tree© out the eniira channel In ©r&es* to 
describe e ch channel segment. A channel segment may be described 
wit v out any knowledge cf the complete ch cnal or channel* of which It i« 

& part. It Sa only necessary to examine a diagram of a section, choose 
a stag© which receive* information from sources wholly outside that 'sec¬ 
tion, and proceed tc trace the flow of information from this singe to all 
stag''* until a stage is found which is outside the section. Thera px*y 
he many alternate paths for the flow of Information., ’tach of these Is 
another channel segment. To find all channel segments belonging to a 
given section, all such paths wist be traced out, starting with each 
stage which receives inform?ti-n from sources wholly outside the section, 
This rreoees may seer very laborious, hut in many dr ees it is r ea1 1 y 
ouite fi'rle. very alternative rnite enccmtered in tracing out these 
nr.the e’outd he cerefully noted down in order to avoid overlooking one 
of the oaths. 

h .33 U«-e of The Channel Conc ept 

Once a tabulation of all the channel **#nents of a ‘jiv©^ section 
has been made, it is a comrrtratively simple matter to design a t@?t 
sequence for each of them. *hen there are several channel segments 
eharing the same sta e (or stares) it is sufficient to check one of the 
channel segments In order to check the stage. The choice may be m.ids 
crbit&rily. However, it is frequently desirable to check all channel 
segments, if only for the greater assurance it provides. The source* 
and destinations of the information transmitted by each channel segment 
ehculd b« tabulated too, as should te the eoirrand pulses which control 
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the trane- iselon of thin information. It is then only necessary *c chocs--'* 
one of the sources (if there la only one source, no choice exists), om 
of the destinations) end one of the sequences of commands for tr&n&r 1 hjl ig 
the information from this snares to t ! 'is destination. Any cniwsnlpat- 
method of supplying the source with the information end examining, the 
destination may be used. AH efoicee of this nature may he Bade quite 
arbitrarily if there are alternate possibilities, If there is but ca® 
rossiblT ity, then that is the way it met he dons. T t is sometimes 
possible to make choices in each a way as to economics on the amount of 
storage required. These points should become clear when some exam lea 
are considered. 

There Is one point that require special attention. Frequently, 
the information euprlied tr a channel segment to its destination is used 
to manipulate some numbers in an arithmetic 'rocess. In some cases, it 
may happen that the correct result will he obtained even though the proper 
information i* not supplied. '•'benevr such a channel segment Is being 
checked, care must be t-ken to be sure that the numbers being manir ilat rd 
doaot lead to one of these special cases. 

4.34 Multiple Faults 

The test sequences which have been obtained on the assumption 
that all ’■arts of the computer (other than the channel segment being 
considered) are working properly, may not apply under less restricted 
condition!'. In many capee, it is possible to design other test sequence® 
vMch a/e useful when multiple faults a-8 ^resent. However, it is still 
necessary to make some assunrr’ion regard 1 ng the combinations of fajita 
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to be coneldared, It ig also convenient to limit. conridoratlon tc a 
small unit wMch may consist of several pactions. The concept of e 
chon: el s>~gmont must b® broadened to Include all atayo’s of the channel 
which are in any of there sections. IMs ie 7»iy nearly the earn® tyre 
of channel segment that Sumer us d. 

The procedure requir- s that careful attention be given to tbo 
order in which the channel pef-jnents are checked. First, all single- 
stage channel segments should be checked. Then, desl.-n test sequence 
for all two-stare channel segments which share stages a1 ready checked, 
and so on. Of course, It is quite possible that there are multi-stage 
c'annol segments consirtlng of several stages tbit car.iot be checked 
independently. If such a situation exists, then the whole channel seg¬ 
ment met be treated us to ugh it w» r* a single etp.re. 

If It is desired to exrand n te-t seau^nce to include tnor*' *ea- 
t’ons than were considered in its original design, it Is usually necessary 
to Ptart all over end design a. completely new sequence. The additional 
stores wh 1 ct come into con«!deration generally c ujigs the corroosiVon of 
th“ c’- nnel pegments 00 thrt the orig’nol sequence is cot applicable. 

In particular, the one-eta?* channel segments of the emu Her unit nay ba¬ 
cons nultl-stare channel segments. Thi s feature of the a’tvroach is «iom©- 
what of a disadvantage because it requires that much analysis mat be 
carried out every tine a larger unit is considered. However, in lieu 
of n better arrroach, this disadvantage must be tolerated. 
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4 o 3 5 Tr ou bl e Lo cat Io n 

The tert sequences designed for checking the various ch,-nnel 
segments ray b@ used in trouble location. It is only necessary te itf-f «>♦ 
wine the point in the sequence at which an alarm if obtained in order to 
discover the faulty channel segment,, The type of information which vss 
not transmitted is determined by analysing the contents of the various 
flip-flops. ihase two steps usually reduce the number of ooesible rcca- 
t-on« of the failure to a reasonable va’ue. Manual trouble-location 
techniquea may then be used. 

a gr^ator decree of trouble location can he obtained when a 
number of channel e .gmentg share ? he east© stages (see Ti p. 17). It i& 
necessary to ur© a test sequence to check each channel segment. A 
number of possibilities may b® ©Ilmira ted by considering the results «b- 
tnined for each sequence, deferring to Fir. 17 end se-aumtng only slrgla . 
failures, the following pattern of results will be obtained! 


Defective 

Channel 

Channel 

Channel 

Channel 

Sta e 

Segment 

Sequent 

Segment 

Seqsnsafc 


f 1 

1? 

#3 • 

m 

4 

Al ana 

Correct 

Alarm 

Al ar* 

D 

Al arsi 

Alarm 

Alarm 

COJT'-Ct 

C 

Alara 

Alarm 

Correct 

Alar b 

D 

Alarm 

Alann 

Al arm 

Alars 

Actually, it is not 

necessary to rf-rfonn 

the test sequ< 

nco for 

channel 

segment -1 because 

the alarm will always 

he obtained. 

*P * s indicates 
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a real difference between shocking and trouble location. i"or checkins, 
It would be sufficient to perform the tort sequence designed for chrnnil 
sequent *1. if no alarm is obtained, then all four stares are op erMi sg 
correctly. If m alarm it obtained, the other thr^a tost seauer.oee rn v>■ 
be used to Isolate the failure. 
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*;>, 1 S ingle Faul t Sequences ' 

1 

Several tort «equrncna have been designed to check typlcal 


sections of th? computer. It 1® assumed that ev ry channel segment, 
other th- n the one belna checked, it or err ting- correctly (i.e., only a 
snple f a n t arista), Cons i dorr t! on of storage ha® boon omitted 1 m>- 
cnus* the chrnnel segment® consist of a prohibitively large number of 
stt.-e*. Srecirtl techniques will probably be sjor® suitable for checking 
stor r'e. A. desira for sn entire section v a® aleo been carried out in 
‘he bore thot it would noint the wey to the design of t® ,r t aequ^-nco* 
for larger sections, 

5.11 Arithmetic Control FI ip*. Flora 

Test sequence design 1® rrob/.bly most *imrly illustrated in 
.‘irlthretlc control because it consl ts mainly of disjunct channel seg- 
rent* c nt- ining few atage*. Arithmetic control ha* been discussed in 
•section ?.1?3 where a block diagram (Tig, lU) hns b«en included. The 
section defined by volt; ge-vr rlntion line 7? vil 1 be considered. 'IK* 
section i* identical with the one defined by volte• e-varlation line TO. 
The following stages are in Vie sections 


FT30Ji.01 

TT? 06.01 

mo7.oi? ’ttot.o? 

’Tjng.oij TTTPS.O?} ?T*P8,03; TT’ng.oU 
TTtoo.ol; ■r 7 09.or> 
r T? 10 . 01 ; 'Tno.o? 


(pign control) 
(multiply) 
(shift) 
(divide) 

(snecla.l-add) 
(point off) 


The channel segment®, together wihh the source* ond destination* of the 


information 1 nd the sources of the commands, will now be described in 


t 
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detail. Thus* deecrirtions will be followed by e. discussion of the 
design the test sequences. 

5.111 C hannel Segment 1 - 'Sign Centre! 

Only one stare is involved, FF304.01. 14 ray receive informa¬ 

tion via it? trigger inut from itself (assuming & slight delay in trans¬ 
mission), nd the sign digits of A.P. and AC. It nuorlie* information to 
AC i.nJ itself. The cor rand AR sign check (which occur? on nr., oh, and dv, 
see Fig. 16) is required to obtain the inform Hot. from AP. The corrand 
AC aim check (which occur* on mr, mh, dir, *1^, er, end *f, see Fig. IF) 
transr-its the informtion from aC. Jnforn tion for itself is transmitted 
f ad rec«»iv"d on the co» ■ and product sign (which occur* on nr, mh, dv, *1^ 
sr, nd sf , see Fir. 18) which alee troiwrl t* the Infer a tion to AC. 

Co .'.Aider the 'bllity of t 1* channel segment tc handle the 
info ir tion 1. Aceurae that it ‘as been decided to suprly this informatics:: 
from AR„ The more easily accessible detinrticn is AC. Either mr, 
or dv may be used to transmit the information. Sucrese er is e v oeen 
( dv is a somewhat more complicated ore’-etion). The operand must be a 
negative number, say - 1 /?. Thu* ve m t -t order mr °C(-l/?)« Son© number 
must have rreviously been in aC, and, in order for the Information i 
to he tr-Referred on the ’command rroduct sign , it should have been posi¬ 
tive, say +l/2>. This enn te put in AC by the instruction ca (FC(l/j?)» 

The resuHing product is, of course, ~l/4. Thus the test eequeace hue 
beer, developed: . 

ca PC(l/?) 

mr *C(-1 f2) 

qc PC(-1/4) , > 


I 
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Oar© met 'be taken to be «r« that the correct answer ie not obtained If 
the channel segment fail® to supply the proper informstion. In this 
problem it is quite nr’-arent tlvt the results of the myilti' ,, ller tlm would 

1 

be +1/4 If the proper information were net *ur*ll*<i, so that the check 
ie indeed valid. Note that only the signs of the operands are instrumental 

I 

in producing the desired inform)tlon; their magnitudes may be chosen 
arbitrarily. The particular mature given wore chosen because of their 
elm: 18 repopoant^-tien In binary note : 1 m. 

lc check Its ability to transmit the information 0, the sequence 
of instructions: 

ca *C<1 /?) 
mr RC(l/2) 

00 PC(1/4; 

my be used. If the information 0 were not transmitted, then the Inform- 

V 

tlon 1 would be transmitted. The result would be -l/4 so thtt the c v enk 
Ip valid. 

There sir instructions completely check the abnit ,r of this 
channel segrent to perform its function, assuming that any failure symptom 
which may exist will exert its effect throughout the time reouirod to 
carry out th;*» sequences. l<ote that it was not necessary to u«e all of 
the information sources or destinations. Indeed it would have b en oulte 
difficult to base a check on the um of ?yvo4.01 is Its own source and 
destlra 7 ion. 

5.11? Channel Segment ? * hultloly 

Again, only one stare is Involved, FT 306 .OI. It receives the 
information 1 from central control via the set in ut on the con-©nd multiply 
(which occurs on mr nn<l mh, see Fig. IF). It receives the information 0 
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via the cl err in ut from the step counter ond-carry pal!?#, which may 
occur on nr, fib* kv, *1_, *r, and »?< It nay also receive the information 
f on AC1 to point off (on sf only). The information in tr&r.OT’itteti 

t 

to TO15 only whenever a M^h- frequency clsck pul re occurs. 

To check the abi'ilt: of the charnel segrent to trar.srlt the 
inform/.tion 1, all thr.t is necessary le to use either the or or roh opera¬ 
tion. "he sequence: 

ca red/?) 
ur *0(1/2) 

' qc PC(1/U) 

doer just this. It is, of course, on® of the \eauences a'-ed for channel 

1 

opfnent 1 am! hi s b*--en used a'sln in the internet of economy. If the 
information 0 were trarsmitted, none of the stipe of the multiplication 
would be oerforrec. Ko step counter end--arry voul.d be available to 
"ermit the flow of time raises tr. resume. The coir uter would remain in¬ 
active indefinitely ("prolonged stop clock"), at pre«ent, no elans is 
given when this situation exists, although the iper/.tor can eesily detect 1 
it by observing the indicator lights. It has bem proposed tfc- t an alarm 
indication for thie condition he included in WfJ. It is likely that this 
proposal will meet with erproval. 

If the channel segment cannot trar.rri t the information 0, 
spurious shifts and additions in the arithre;ic element ••oald occur at 
all times (though such notions are rrop^r on TT? of bp, or mh). Thus,' the 
instruction co RC(l/?) vill pi c® if? in AC and the instruction qc PC (I/?) 
can he used to check that it remained the*-®. Wile no definite prediction 
can he mde regarding the content of AC in the tr*-*ence of the spurious 
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actions er/rendored by thr failure of FT306.QI to trnnerit the information 
0, it is s (, fe to e.fieuoie that It would not bo 1 /? (fc v outffc there n-o times 
when It would be if?). A. mere definite check cannot £a obtained. 

It ie now poeeiMe to indicate the solicit role of the single 
fault assumption In the de«lm of these sequence*. The sequence required 
to check FT30KOI depends on the correct operation of ?F’06.01, while 
the sequence for checkin/: TH06.01 depends oa the current 'pemtion of 
FF30U.01. Aeoumln^ only eln/rle faults, both fli-o-flo s can.ot fall eiwul- 
taneouely. If there ie a failure in tTJOh.Ol, FF?06.01 will operate 
protv rly to effect the check and vice verta. a* It happen*, even if 
1-oth should fail simultaneously, some alarm indication would be obtained, 
but tMe is Juet a fortunate coincidence. No effort was made to obtain 
alarm indication In the presence of mlttrle ft'-Its. 

h.ll? Channel -egpents 3A and 3 P - £ 1ft 
because channel segment 3 a, conei 'tin# of Y'f'JQ'f* 01, ie quit* 
similar to channel segment 5 11 conrlrtinf; of FP 307 .O?, they have been 
/T° u P e <I together. 71th minor change* (e.£», replacing rr and mh by *1^ 
for 3A and »r for 3^)» the diecueelon in section $.11? ie applicable, 

7c test that eegjnent 3A con transmit the information 1, the 

sequence? 

ca RCO/U) 

si 1 

qc «C(l/2) 

may be used. Similarly, the sequence: 

ca RC(1/?) 

er 1 

qc ?C(1/U) 



■Repor t H--177 


6 8 


may be used for segment JB. To check th-1 "both segments can trano r i < ; 
it inform’t Ion 0 the sequences designed for channel segment 2: 

ca *C(l/?) 

PC RC(1/?) 

is eat!efactory. 

Since the choice of the operand* is arbitrary, the desire to 
a»* stor • economically dictate* tb:<t same net of number* be used when¬ 
ever possible. This criterion hat -uided the selection of the operand* 
In this sequence. Further reduction of storage requirement* can be 
obtained by making u°e of the c nteftt9 of aC after the <jc operation. 

THk is a standard device used in coding. Ihe sequences for channel 
eegTvnts 3A and lb nay thus be reduced to: 

ca !’C(1/?) 

oc KC(l/?) 

sr 1 

cc FC(l/U) 

•11 

qo *C(! fP) 

T' is oaves tvr orders. 

5.11U Channel ^epgtent H - divide 

The flr^t mul ti-st'ge char nel segment to bo discussed'corr¬ 
upts of *T3P*.01, "T30f.0?, T F?fF.03, and ^JOF.O 1 *. Several apparent 
difficulties mo;’ become evident from a study of the block diagram. At¬ 
tempts to aoply the channel concept to the two flip-flops of the divide- 
P'ilp» distributor may meet with failure because of the corticated manner 
in vrhlch they /-re interconnected. However, If they ' re treated ce a 
generalised fliv-flop etege having three stable states, the channel 
segment bec^mee clearly defined. Fo renl diffici ty is ntro uced by 
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the n»©d for information to tubs through an external section (AC) la 
be'ng trar.'-mltted from th« divld®-pul«e distributor to FF 39 E. 03 * It ".a 
only necessary tc choose the operands so th;t the ft.^ropriate information 
Is sap lied to 'T 7 CEo 03 . Beoeue# rF 30£.03 le Intended to provide an 
alarm when an improper division is performed, to check thin function It 
Ip necee'-ary to actually order a division which remit® In an slana. The 
analysis of t Ir channel segment become* ouite etral^tforward one® those 

few difficulties h-;ve been resolved. In fact, all Information lo trene- 

i 

rltted olonf: tMs channel by a sequence o r cor-ande which automatically 

follow® the command divide (in normal operation). 

The division of l/k by 1/2 would, of course, cau r © th© informr*. 

% 

tion to !>© transmitted to the r F3ng,01. This w^uld Initiate the tranamlftsion 
of all tr*» of inform tion from the dlv1de-pul«» distributer. The . 
particular onerande remit r** th» t both divide ?sro >. nd divide one be irr.n»- 
mitted to t P 3 (> S.03. However, divide yero is rot transmitted at a time 
vhen 'T*Og .03 centain® 1 * only an Improper division (more fully discussed 
below) can Provide t’ls conditirn. a sequence for checking thi® channel 
segment Is: 

ca P.C(1/U) 
dv KC(1/?) 
qO SC(*>) 

*1 15 
qc *C(l/2) 

That this Is n'-t a special case in which the c© tt'-c resu’t is obtained 
though the proper information 1® not transmitted can only he verified 
by the tedirur procone of roouslly carrying out the step* of th© division 
in the same manner as tho connuter, taking due note of the rossiHe failures. 
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Such verification has been made for this sequence, but the details are 
not T/reBentsd hers. Some failures will remit In a "prolonged stop 
-lock" which has bean discussed in section ^.11?. These particular 

i 

operands, chosen for their convenience, me therefore satis factory. Had 
it proven otherviso, a trial and error procedure would hare been nflG8»J*ary 
The a me sequence that Is developed In soctlon 5*11? for checking that 
17706.01 can transrlt the Inform?.ti<-n 0 may he used to cheek that FT30S.OI 
can transmit the Information 0. 

At t>1s •’xjtnt, orobntly the mo«t natural choice for the required 
lmprcp-r division is 1/? divided by 1 /**. If FF 3 O 6.03 is voifclng pro¬ 
perly, an alarm should be obtained on the first star of the process. 

If no such alarm is obtained, the cor utar will continue to operate oa 
the numbers in the arithmetic element as though it were performing a 
valid division, '-her* the step counter indicates that the process In com¬ 
plete, aC will contain 0 in all digit columns, while HP will cont In 1 in 
ill digit columns. If the operation is followed by sl^ 15» an overflow wil . 
occur during the rrund-off, resulting in an arithmetic check alarm. An 
alarm will tc obtained in both correct and incorrect oreri-tion. In correct 
operation, it will br a divide error alarm, while In incorrect opertion, 
it will be an aritlretic check nli nr. The seqicncw, 

oa RC(l/?) 
dv RC(l/h) 
si 15 

must be rerforoed separately from other sequences because the co miter 
must be restarted quite frequently. This situation always arises when 
It is necessary to check a stage designed tr give an alarm. 
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5.115 Ohs.nr.ei 5 - Special-Add 

Anoth-T multl~nta‘« cbanrel segment consi'-t* of FF^ 09,01 sad 
rT’09.0? (ee© Fig. 19). • 1 'Mle 1** is possible to analyze It using 
channel concept, n sequene nay be designed more directly. Although 
FF 309 .OI receives information on many operations, Including 9a T FF309.02 
receive* informoiion only on *a. Furthermore, if the sum of the two 
operands Involved In a special-add is greater than or equal to +1, 
FF 309 .OI receive* the Inform tlon 1 nd IT 309 .O? receive* the Informa¬ 
tion 0, representing a carry of +?"”*'*. If the sum Is less than or aqu.il 

to -1, r F309«01 receive* the information 0 and FF309-02 receive* the 

-15 

info rat ion 1, '*pr°-anting c errry of -2 . Thera carries ere trans¬ 

mitted to AC on the conv end sreclul carry of a suh«eouent ca, ce, or 

* 

cm . Thus the sequence? 

ca *c(l/2) 
sa FC(l/2) 
rc PC(-tO) 
ca l’C(l/4) 
rc RC(l/4*-?~°) 

-15 


may he used to check that a carry of +2 
The sequence: 


can he transmitted. 


ca RC(-l/2) 
sa r C(-l/?) 
oc RC(-O) • K 
ca FC(1/U ♦ ?“ 15 ) 
oc RC(l/4) 

-15 

may he used to check the carry of -2 . a® usual, the numbers were 

chosen for convenience. 


If both flip-flo-e contain 0, a carry of +0 is transmitted, while if 
both fllp-flor* contain 1, a carry of -0 is transmit ted. The correct 
result cannot be obtained unless the correct Information is sue-lied 
by these flip-flcp*. 
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5 * 11 6 Chorqvel Se.y.enfr 6 - Poiat-ftff 

Two stages, TTTIO.01 and TT’IO.CP, compose this channel •?• g- 

* 

pent. The design details nay be carried oat In a perfectly straight* 

forward earner. Only the sequences will be given hei«eJ 

c& RC(l/2) 
qc RC(l/?> 
oa *C(l/U) 

*f x 

qc RC(1/?} 

(x represents the address of roiy convenient register)« 

5*117 The Complete Sequence for Arltheutic Control 71 lp-Hops 
The complete sequence for checking voltr^e-vrrlation line* 79 
fin d fO Is tr be found In Appendix II r e Test Sequence Fumber II. The 
short sequence* have been combined In each c way a* to silnlml" , o tie 
orount of storage required. Addrepr.es have bean assigned to the various 
re 'lo'ers. The resalting coded program can be a* n d with te*t storage. 

The sequence for checking that a divide error alarm i« obtained has 
not been included. 

5.1? Inrut-Outrut Element 

The ln’-ut-outmt element (IOR) (so* Fig. 15) was designed with 
a c* ;.si derail e air.rant of built-in checking. The comparison refiner {CO ) 
Is used In a multiple checking scheme to check the in-out regi«ter (IOR). 
These two registers are operated In such a way as to give a fairly 

17 

thorough check of the external film equipment, assuming single faults. 

A. special pre&termined check Is used to guard COR against oingle faults. 
Consider Fig. 5 . After the word has been transferred from the film to 
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103 (the reading process), both I OR and COR should contain the word 
.which h;.e been reed. Aftsr th« recording rrocoes, both IOR and CO^ 
should c nt(in the complement of the word which has been recorded. In 
any event, both registers should have the same content* vhen the file, 
equipment provide# c completion pul'-e. The nils* will command add IOR to 

COR, w 1 ich will supply the word in IOR to the trirror Inputs of COR, In 

a manner entirely analogous to the checking of transfers discussed In 
•action P.135, this should lea-re COR containing 0 (with the exception 
of COR check which contains 1). The completion pulse i« delayed l/? Msec. 
i ad used to tense OTOU of each digit column If on« of these should rro- 
vide an outut it will be applied to CT07 which will be open (only single 
fault ro**t v le), so th't &n in-out alarm will be given. Then, to moke 
cert in t v t each digit of CCR can contain 1 (and that CCR check can 
contain 0), this delayed completion pulse is farther delayed by 0.1 usee, 
and used to ccmplsmrnt all fllp-flors. It is delayed another 0.3 >J»eo 

end filled to CTO? and to all OT *s Oh in series. It is applied to 

0T07 ®o th.it an ln>out alarm 1® obtained if COR check cent ulna 1. Since 
the remaining FT*s should coot-in 1, the pulse *tp r lied to CT04 should 
eventually be applied to 0T08 and emerge as a continue operation pulse, 

Tfco continue operation pulse performs a number of functions; the one which 
is directly concerned with the checkin/ process is setting COR check to 
1. If the continue operation pulse does not emerge,COR check will re¬ 
main in 0 (if it were in 1, an alarm would have 1ready been obtained). 
Thus, after an additional delay of 1.3 nsec. ; the completion pule* is used 
to sense CT 06 . If COR cent; Ins 0, OT06 will v e open and or. in-out 



Report R-177 


- 74 ~ 


slam is obtained.. This seme tyre of predetermine check is also used 
In checking the check register (check-register cheek). 

Test sequences will he designed for the f 1 ip-^lo^e of ICR (making 
use of the facilities rrovided by CO’’) and the flir-flo-s of in-out 
control (IOC). There aeight volt-ge-varlat ton lines sur-lying the 0 
sides of the flip-flora of TOR (each line supplies tvo digit columns; 
n and »*?). Vlght more suprly the 1 sides of those flip-flop*. These 
p me lines also eurrly the flir-flor* of all the repeltive units (e.g.. 

AR, JR, aC, AC, PR, etc ). One vol U,-e-vi.rlcti n line (181) sup lies 
the 0 sides of nil the flip-flo-s of IOC (eroept J"?4l0.06 and FPhio.OV, 
which a'e not standard flip-flops). The 1 sides of these flip-flops are 
surplled by voltage-van i&tlon line 18 ?. The two pt»c 1«1 flip-flops 
; re *U' T lI»>d by voltag« -variation lines l60 (0 side) and l6l (l pide). 

%121 In-Out Agiste r 

although the digit eoluras are suprlied by several volt, go-variation 
lines, it. is convenient to treat the entire register as a single section, 
Moreover, it may be treated as a channel oeficent. The teet sequence design 
makes us/ of CCP to obtain on alarm when a failure ovists. This technique 
requires thj t at least one of the <Ugit columni of COR contain 1 after 
the cormleticr. pulse corrande add TCP, to CO R when there i* a failure 
in ICR. All alonr pulse wo lid then be obtained when the delayed comple- 

j 

tion rjl«e senses CTO' 1 of that digit column. 

'hen a failure occurs in one of the Hip-flore, it is not pos¬ 
sible to rredict the behavior cf tho**» flip-flora to its left with any 
degree of certainty. This is largely bf cause the shifting gate tubes 
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(flT 06 end 0T07) a’'* a~c coupled to their flir-flov*. Should flip-.“lop 

remain in one? position permanently, both gate tubes would be open. Thus, 
the next fllrwfloi' to th« left will le ruined on both,' the clear and uet 
inruts alro«t simult-ne f, aely. in all probability, this will cause It 
to trigger, but there definitely is doubt as to its actual behavior. It 
is also Important to note that the command read shift applies a pulse 
to 0T10 on the 0 side of R^IO.OU. The out rut of the 07 is used to 
shift COR. If IOR 0 should transmit a pulse on the IQR one out line, 
TTUlOoOU would be set to 1 and the contents of COR would no longer be 
shifted. Thus, a failure, of one of the flip-flops of IOR may also effect 
the shifting of COR. The naximum possible n rber (and, Indeed, the correct 
number) of times that the contents of CCR will be sb.tfted is l6, the 
number of shift pulses rrovided b the film unit* It should also be 
noted that COR will be shifted at least once (a shift pulse is reo ilrod 
to produce a oulso on the IOP one out line). 

To check IOR, it is only necessary to epeclfy words tc be read 

' * 

from the film. Th^-se words must be chosen so as to avoid the poseibllity 
of coincidental agreement of the contents of IOR end COR. v.'e will 
discuss the choice of these words when COR is rot eh’fted the correct 
number of time* separately from the choice when COR is shifted correctly. 

If COR is shifted correctly, it will certain the correct word. If one 
of the flio-flops of IOR always transmits a 1, the word should contain 
a 0 in that digit in order that COR be provided with 0 in that digit 
before the corr»nd add IOR to COR . To cheek every digit column of IOR, 
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every digit of the word should bn 0. Thai®, one of fch* words to be road 
ie +0. If, on the other hand, one of the flip-flops of 10? alvaye trans¬ 
mits a 0 P the word should contain a 1 in dig?, t column. Kene®, .he 
word -0 should also b® read. 

If COB ic not shifted the correct number of times, COR 15 will 
b® used to obtain the alsrtn. Note that COR 15 will contain on® of the 
first fifteen digits of the word read, depending on the number of shifts. 
10? 15 , <m the other hand, will always* contain thr sixteenth digit of the 
word r^-nd (unless it is the faulty digit). Thus, if ve read a word in- 
which the sixteenth digit ta different from the first fifteen, v® will 
get the desired alarm (assuming IOP 15 i® not at fault). This gives u* 

■“15 »X5 

the choice of using either +? or «? ' for t'ie purpose. Now, surroe® 

thfct I 0 H 15 always tr&nsrits 1. If is used. It will provide CCR 15 

with 0 11 the alarm is obtained. If, on the other hand, I0R 15 always 
-15 

trans*its 0, -J? y will provide OCR with l s yielding the alarm. Thu®, 
both words should be used. A little taught will show thr t th*»p© two 
words would al"o be satisfactory when the oorroot number of shift* i» 
rerforned, so that +0 end ~0 are unnecessary. In fact, any two wor :>» 
vbich are the co~rlem^nls of e c’r. other will provide the desired check 
when the correct number of shift® is performed. 

Thus far, IOF auxiliary ha® not been considered. It i» a rather 

\ 

special case, for, if it h?* failed, the content cf every digit of 10T 
is Indeterminate. Fowover, COR would be shifted the requisite l6 time® 
and woul d therefore cort in the word being rend. There 1® soma poeuibl- 
lity th- t 10* would also contain this word for every road operation, hut 
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ite probability is qiifce negligible. Tor practical purpose, it may be 
a^puaed th t ICR auxiliary is checked. 

5»1?? In-Cut Control Flip-Flops 

la-out control is also largely self-checking, regardless of 
the word* being transferred between storage > wi thw remote equipment , It 
ie considered as a single section, although it is composed of two section* 
The -ajor exception to this statement is provided by a failure in FF>»10.0ft ; 
which controls the su- ly of restorer pilees to the in-out element. It 
ie necessary t* sto the flow of r storer pulses to ICE dating the opera¬ 
tion of the remote eouinuent because it is not synchroni-ed with the rest 
of the co* rater. T v is is the function of TF4l0.06. If it fails to 
«tO’ th’e flow, it is not TroeriHe to rredict the behavior of IOK. 

In all rrobaMlity, this situation will be detected, but the uncert in 
tine relations moke it impossible to carry oat any anal: sin. If r F4l0.06 
never rermits the restorer uls*-e to flow to T03, a similar dlff*culty 
of analysis obtains. The loss of restorer mlses has beer discus red in 
section ?.?p4. 

The analysis of the remaining portion of IOC is quite straight¬ 
forward. ^However, It involves a tremendous arount of detail which would 
not add very ruch to the understanding of the method being uped. It 
requl res a thorough knowledge of the interaction Of the remote equipment 
.\nd the in-out elem nt croper. These details h.-.ve been omitted here. 

It turns out that only a very single sequence is required to chock 
ICC. This sequences has been erird^ned with that repaired for checking 
IOP. and Is rresented below. One point worth noting is that' sufficient 



Report R-177 


- 7S 

time; met be allotted for the eomplefcition of an rc operation in order t*' 
cheek the ability of FF^IO.OU to transmit 1. The instructlone in A»> oni 
A.6 have been used to obtain o delay of approxitaiely l?P-0 usee, (with TS*‘ 
for thie -nurpoiteo 


1 net motion* 

Constant Stor:-.£e 

A1 

rf K1 

ML + 

0 

A? 

re HP 

BP - 

0 

A3 

ca Bfj 

*3 ♦ 

? -l5 

A.U 

ts Cl 

Tb - 

? >15 

A5 

ao Cl 

*5 - 

p‘ 6 

a6 

op A 5 

Variable 5 torrre 


A7 re — 

(TT) 

Cl (counts delay - see A 1 } and A 

AK rf KP 

( r r ) 

CP 


(TT) 

C*< store numb-re read 

A9 rd C? 

(vr) 

ci 

-MO rd C3 

(T ) 

C5 

All rd C'4 

Remote i-Lqu Indent 

Al? rd C5 

K1 - 

recorder 

A13 ca C? 



aiu q3 ra 

K? - 

reader - film for use with 

Al5 oa C? 


this reader should oontrln 

Al6 no R? 


blocks of four words separated 

A17 ca CU 


by a distance which permits the 

A1P qc R3 


reader to stop before it reach©' 

Al9 ca C5 


the nert block. Kt-ch block shot 

A?o oe 


contains -K), -0, +2“^, n.rd 

API rs — 

A2? so Al 


^, in th;.t order= 
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5.13 Step Couatag 

The step counter (SC) is that cart of arithmetic control which 
counts the auaber of shifts which nr® performed in thfe arithmetic pro¬ 
cesses which require the use of arithmetic control ( mr. yh, Ay, e l , tnr, 
and sf). In all thee* operation* (with •£ nearly alway* an except ten), 

SC i* the device v v lch provide* the end-carry rulr® which return* control 
to central control. SC mat he roast (or pre*«t) in all operation® (ex- 
cept if) ec that the end-carry i* obtained after the proj $r m*her of 

A block diagram of SC ia *• own in Fig, PC. Block eehemf-tics, 
which show the individual stage*, are given In. Fig. ?1 and Fig, ?2. 

Ve will design te't sequences which may be u*ed fa* the entire step counts r. 

Th«re are 11 different voltrre-variation lines which euprly SC, 


They are 

(eta<e numbers refer to 

the block schematics); 

Line No. 

Application 

Stage* Affected 

77 

FF screens (0) 

FF 10, 11, 1?, 13, l4, 15 

IS 

FF screen* (l) 

FF 10, 11, 1?, 1?, 14, 15 

U3 

CT screens 

0T01 (5 digits), 0? (6 digit*) 

04 (5 digit*), 05, 307=06, 307=07 

199 

GT control grids 

GT01 (5 digit*), 0? (6 digits) 

04 <5 digit*), 05, 307.06, 307=0? 

~?1 

CT suppressor* 

OTO? (6 digit*}, 04 (5 digit*} 

05, 307.06, 307.07 

POO 

0T suppressor* 

GT01 (5 digit*) 


RA control 

BA 71 (stoo counter output, Fig, '?) 

97 

TT Flatee 

TT v?05, 305, 405, 5"5, 605, 705 


RA screens 

BP screen* 

BA Viol, ?01, 301, 4oi, 501, 601 

(Fig. 9?) 

w no?, ?o?, 30?, 4o? 50?, 60? 


(Tig, S>?) 
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96 

00 plats* and screens 

CO no? (vio? cathode) 

n 

BA pintle and scr&enn 

BA V 103 , 104, 105, 106 , 704, 803. 



8)4, ©5 


CO plate* and acre^ne 

00 viol 


GT plates 

OT Ok (6 digit*) 


PD plate* 

BD no?, ? 02 , 30 ?, ! «o?, 50 ?, 60 ? 



(Fig. ??) 



PA VI (Fig. ??) 

POl 

TIa control 

BA n04, 105, 106, 704, 801, 004, PS05 


lUl 


Pa control 
TO control 


tvv viol, ?oi, yi, Uoi, 5oi, 601 

<FSg. ??) 

PA V103 

to no?, pop, to?, hop, 50 p, 6 c? 

(Fig, ??) 


It is clear that lino* 77 :i»d 7®* define the Game unction. Line 
113 define a different section. It ray be shown tb t the sections d©- 
f' red by all the other line* (with antr-e few exception*) ray be considered 
re ’'urt of the section defined by line 11?. T-l* ie clesr for line* 199 
and ??1. In addition to 0 T 01 (which ie ru^ lied by line 113), line 200 
supplies buffer amplifier BA VI. However, a failure of BA VI will affect 
CIO? (6 digit*), po that a test sequence desi-ned tr check CTO? will 
di«cover the presence of thie failure. Similarly, for line 97; failure 
of the trigger tube* (T73) will affect the read-in process end Is checked 
with 0701 , while failures of the baff r amplifier* and bu.s driver* (PD) 

: re checked with GTO?. The failure of the fp-te gen^rrior (O'*) supplied 
by line 96 will b® checked with 0T01 (see section 6.11). ' ! Hih the ex¬ 
ception Of BA V107, 10**, 105 , 106, 70'i, PCI, POU, and fl)5, the stag®* 
found on linep 17, ?01, rnd lUl have been diaossed, The failures of 
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BA. VlOU, 105, 106, mid 704 will be checked with GT05* Ths ffcllur© of 
m V103 will be checked with 0T01. The failure of M V801 will aflfect 
the restorer-pul ps sun-ply end will not be considered {spp sectior. 

Thus every etage except BA VR)4 nnd 3D5 will be checked by the 
sequence designed for line 113 . The failure of these buffer amplifiers 
will affect the information surrlied to IT306.01 nad JT 3 OS.OI, and will 
therefore be checked by Teat Sequence Humber II. Nevertheless, they 
will also be C''RBld'*r«d In connection with lines 77 and 7 ? « 

5.131 Step Counter fllr-FIo^s 

The ro«t convenient channel segment use* all of the fllp-tlonp, 
with FF 15 transmitting inform tlon to FFl4 t ITlU trans’-ltting It to 
TT13» **‘C. Inforr tlon Is surrlied to tMa eh- anel. segment by the com¬ 
mand add to SC . The way to check th-.t all flir-flo s can transmit both 
0 and 1 Is to start It from the clear position and have it c^unt until 
its maximum capacity Is exceeded. This con only be accToHshed by- 
ordering either si 31 0T 2L } 1° dither of these orer. tlona would leave 
0 In AC, the sign defending on the sign of the number that was In aC 
before the shift orer tlon. Since t v l* Is a ca?e in w-lch the check 
derends on the manipulation of numbers, we must observe the effect on a 
fa’lure on these o-er'.tions. If one of the flip-flops cannot transmit 
1, the SC end-corry pulse w^uld never be obtained, uniting in a "pro¬ 
longed sto’- clock", This condition is therefore checked. If one of th® 
flip-Hors cannot transmit 0, It is as t ough it wore by-rassed. The 
capacity of tb«* counter 1 h reduced by a fnotor of ?, po tlv;t the end- 
carry would be obtained after 15 e v ifts. If BP woi’e cl or before the 
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start of the shift operation aad if el. 31 war© ordered, then \C would 
contain 0 (with appropriate sifpa) after the 15 shifts regardless of it© 
original contents. Thus, el. 31 doae not provide the desired check. 

However, If AC originally contained l/P and sr 31 were used, BRO would 

-15 

contain 1 after 15 shifts. The subsequent round-off would put ? ■ 

in AC so that this wr-uld provide the desired check. The sequence: 

ce FC(1/?) 
or 31 
qc RC(vO) 

1b sufficient to check all the flip-flops of SC. 

The ability of SC to bo meet (and pr*«nt) deserve* some con¬ 
sider- Mon. The amplifiers which drive the two reret lines (BA VS)U 
and 005) fre checked with arithretlo control while the rreret line is 
driven directly by a control-pul--© out ut ur.it and e w euld be considered 
with that section. Fev«rthelees, the crystal rectlf'or diod'-s which 
connect th®se lines to the fli^-flom might fall, sr thr - a tert sequence 
shnuid be designed to check the : Mllty of SC to be reset and preset* 

It WPS felt th’it it would be * Jtable to include t is sequence with the 
other sequence designed for lines 77 and JB, portielly because of the 
shortness of the other sequence and partially becau«e the ability of 
the flip-flo s to receive Information from these sources is effected by 
voltage variation on this line. It wuld be well to use this sequence 
wit the other voltage-varietion lines affecting the SC resets and preset* 
The test sequence is quite easily designed. Flret the preset 
was considered. The failure of any digit to preset properly would result 
in the wrong numler of shifts, regurdl"ss of the number specified in the 
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inetruction (the single fault assumption la stilt used.) Since SC 
Is pro et to 013111 under normal conditions,it would be deniruble to 
h v© It contain lOOCOO before the prepet pulse in ordck* to cheek all 
dibits at once. However, It i» not possible to perform on op'ration 
that wo ild leave t*is quantity in SC. The best we can do is to use two 
sequences, one testing the ability of x ' r 'e 11 , 1 ?, 1 ?, I 5 *, and 15 preset, 
prooerly, the other testing this ability of TT10. For the first case, 

SC 1b mde to c ntaln OCOOOO before presetting by performing the sf 
or ration with 1/2 originally In AC. For th* *econri car.*, SC Is made 
to contain locon before presetting by perfc ; -ning the s? operation with 
♦0 originally In AC. The preset take* plixa on the ca operation, but 
t'le does not affect validity of the check on F?10 o The particular 
tunberi were chosen for economical use of "tor&ge. The sequence 
follows. 


ca RC(l/?5 
ef v 

sr 6 7 

qc RC(?' f ) 
ca ^0(40) 
sf X 


ca PC(1/?) 

Br li; -m 
qc *C(? 

(x Is the address of any cr ivenient register) 

To check the multiply and dlvl ie resets, it Is only neces®f-ry 
to jfrfrrm a mJltlrllcation and a division. The operands were chosen for 
economy of the required storage, and th< tedious process of det-sswlaiag 
the r-euits when an Incorrect number of shifts is obtalnsd was carried 
out. It was found that thepe operands (re satisfactory. The sequence® ex 
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~:eaet 

ca SC(2~J) 

qc RC(?“ 14 ) 

Dlvldo Re?-et 

ca RC(?'J 5 ) 
dr HC(2 ) 
oc RC(rO) 

Bl 15 , u 
qc R0(? 1 ) 

The eorplete sequence, written In a fore suitable for use with 
test eto?ag«» la given In Appendix !I si Teat Sequence Kunber Z. An 
additional check on the performance of the s£ operation* le Included, 
thoug’ It 1# not needed. 

5.13S Step Counter ftate Tubea 

the earn general procedure na.y also be spoiled to the «~Hto 
tibes. As discussed In rectlen 3«?' > 2, the only chock a that are included 
determine -whether the gate tube 1* cernble of passing or rejecting e 
rilre at the t'rep when It le sensed. Thl* procedure will also check 

the various amrllflerp discussed In section 5 « 13 * Thero ere no parti- 

* 

cular difficulties Involved, but one eror-ple will be given becau.no t- la 
Is the first tine that gate tub<»e have been discussed. 

Consider RT01, the r^id-ln gate tube. It ta -ated on TI'5 
of every rperi-tlon, because the control switch ie always clear at 
thnt tire. However, the information 1 b only used for the sl_ cn 4 £r 
roarrtiers. If we want to check all of the'-e g- te tub*-*, at once, ,v® 
co jI d try to order sl_ 31 or *r 31. T i« would always leave 0 (with 
aroroori-te «i t -n) In AC. If (VT01 of 7715 felled to rap* a rul*e, the 
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effect would be to order si 30 or sr 30, which would also leave 0 
(with appropriate sign) in AC. Two steps must therefore be used, ar, £ 
to check G-T01 of FF1 and sr 15 to check all other GT“s 01 (sr was chosen 
in order that the initial contents of AC be significant). Thus, the 
sequence: 


ca RC(l/2) 
sr 16 
qc RC(+0) 
ca RC(l/4) 
sr 15 
qc RC(+0) 


It should be clear that the alarm will be obtained from one or the 
other of the two halveB of the sequence in case a failure exists. 

To check that all of these gate tubes do not always transmit a pulse, 
the obvious expedients of ordering either sr 0 or si 0 will do. Hence: 

ca BC(2~ 15 ) 

81 0 

qc RC(2* at> ) 


—15 

Note that the use of sr 0 with .40 containing 2 is not satisfactory. 

This same technique may be applied to the other gate tubes. 

The complete sequence is given in Appendix II as Test Sequence .Number III. 
A considerable amount of tailoring was required in coding this sequence 
to fit into test storage. The sequences developed here appear in some¬ 
what altered form in Test Sequence Number III. 


5.2 Multiple Faults - The Program Counter 

A test sequence to check the program counter has been 
designed in order to illustrate the application of the procedure for 
multiple faults. A failure in the program counter affects the ordei 
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in which the instruction* are perforinod, eo that & good daol of at¬ 
tention must be given to this phase of the problem. Actually, there 
exist* an excellent method for checking the program counter (as well as 

?S nnd TSR) based on a special order wHcb ha* been temporarily wired 

4 

into the control matrix* However, thie should not adversely affect the 
value of this test sequence in illustrating the procedure* 

A block diaprsa of PC appear* In Fig. 10 and it* OT'eratlon is 
briefly dircusred in section ?.1?4. The veltare-variation line* involved 
will lot be listed. They are the same lines thot sunply all repetitive 
unite (e.g., AC, ICR, ate). Only 5 digits of fC (PC11 to PC15) will 
be discussed since orerstt- n with TS req i res only thr-^e 5 digits* Ve 
will assume that the only G? failure possible is the Inability to r>' r® 
a rul'e vben it is eenred. Failure# in the read-in gate tubes or the 
resets will rot be considered. With t is li r itr-* 1 on, there Is but on* 
vny of s ip^lying Information to PCt the e^rvand a A to PC on TP7 
of progr-m timing. Let us assume thrb FC has been olenr‘-d before the 
computer 18 started. It is alro assumed th: t .C has been cleared. 

Therfi conditions can be checked by observing the indicator lights before 
rre^sing the restart push button. 

The computer will nee«s«arily rerfore the instruction that 
Is stored in register 0. The reason for the assumption th t the .-rite 
tubes do not pass a eouricus ^ulse when sensed should r.ov be clear. If 
t v ls rossibility were admitted, the first instruction cruld conceivably 
be ©btc/ned from any of the J? register*. The design would bec-re 
unduly complicated. We will now discus* the design in detail. 
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Consider the first odd to P" pulse. It will reruiro PC15 
to trigger from 0 to 1, thus provl ting a means of chocking both the 
flip-flop Itself j nd the trigger tut ® (not shown In the diagram) which 
anrlifl^s the pul~e. There a.r® tvc poenibllltleej 

1# TMo rule© will succeed In triggering th© FF to 1. 

?. Tho FF will coctlnu.e to contrdn 0» 

It is not ’-oesiblo to determine which ©vent has taken pluc® until tho 
eurserjuont oocrand, PC read out . If the read-out pat® tube (GTO?) ha« 
failed, the second instruction would he obtained from register 0 ro~ 
gr.rdl”?* of the behavior ef th® flir-flor. Howev r, a imltlpl© choejc 
on OTO? is orovidod >y CT03, *0 th t an alarm would be obtained on th© 
transfer check. If both CTO? • nd GT03 should fail *1miltan®'u»««ly, th® 
transfer check V'-u'id indicate agr*fMr«nt, end the instruction contained 
in regi'-ter 0 wru d Indeed be perforred twice in succession. The gams 
sequence of Instructions would result from case 2, In order to -et an 
alarr in t*e-* two cases, it is necestrrv to -*tors an aprworinte in¬ 
struction in register 0. This instruction should yidld an alnrm when 
performed twice in succession. Such an Instruction is ad RC(1/P). 

The addition of l/? to 1/? will result in an overflow *nd civ© an arilh- 
m'-tlo chec alarm. If no ulnrr le given, the second instruction will he 
taken from regi-ter 1 end it ray !« concluded that the flir-flo: is 
capable of triggering and that both gate tubes can trans' It c- sensing 
pulse. 

The second artfl to PC pul e e (vMch will net recur unless the 
previous functions w^re performed co^-eotly) will require thrt thr*-© 



Report R=177 


88 


functions ba P@rfora@ds 

i* rci5 trigp r to o 

?= GTOh of PCI*' trans- it a sensing rul*« 

3. TClU trigger to 1. 

a 

Thar* is a alight rosaibility that a flip-flop which can trigger to 1 

cannot trigger to 0, but c^nsiderstirn of this possibility greatly com¬ 
plicates the design of the test sequence. Tho consideration of this pos¬ 
sibility will be postponed until the end of this section. If CT05 <20®* 
not transmit the rul«e, PC lU cannot possibly be triggered. Hence, the 
contents of PC after V la second add to TC pulse will e either 0 or ?» 

A. ain, it is not possible to determine which event occurred until the 
sub=ecu eat co-- .-rid. PC read out . The failure of the r id-out g-.t* tuba 
(and also CTH3) in this digit column will cause the Instruction in register 
0 to follow the instruction in register 1, r-g/rdle** of the behavior 
of the fli -flop. If the fli"-fl©r failed to trlgrer, this sane situa¬ 
tion v'-uld b«> 'btoined. Since register 0 contains ad (RC1 /?), and 
arithmetic check alarm will be obtained If register 1 contains ca, 

RC(l/2), If no alnrr is given, the nert instruction ie taken from re¬ 
gister ?. 

The nert add to P C pulse will chanre the contents of FC to 3» 
for it has elre-dy been demonstrated the.*. PC15 is capable of triggering, 
furthermore, the command PC read out will yield the r roper reed-out. 

Thus, the instructions will be obtained fro* register 0, 1, ?, and 3 in 
succession. The instruction contained in register ? may therefore be 
fairly arbitrary, subject to the condition th t it will not ceiiso an 
alarm when performed in the ^roper order. 
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The fourth add to FC pul8a will change fch® content* of ' ClU 

and rC15 to 0 and attempt to change the content of FC13 to 1. If It 

fall®, the next Instruction la taken from register 0, ;&» would bo true 

If the rerd-out gate tube of PCI 3 fail a. To Obtain an alarm when t: l* 

failure occur*), It is necessary to uoe an Instruction In register 3 

which leaves leaves if? In AC, A suitable sequence thin far is: 

0 ad RC(l/P) 

1 ca *C(l/2) 

? qc ^0(1/?) 

3 nc RC(l/?) 

If this failure dose • ot exist, the next Instruction 1* correctly taken 
fron register U, 

Continuing to reason In the eame way, It 1 b found that the 
instructions In regi'-t^re U, 5, 6, 7 win necessarily be rerformed In 
the prorer order, ^egi^tor 7 should ernt In an Instruction which will 
leave if? In AC so that an alarm will >e obtained If the next instruction 
Is taken from register 0 Instead of register K. Similarly, register 
15 B- ould cent - In an Instruction w leb leave if? in AC. The contents of 
other registers may he chosen rore or less arbitrarily, subject to the 
condition thet they do net caus' an alarm when performed in the nonaal 
order, 

Kov let us discuss the nodlflections which s.-e neeeeaary If the 
possibility of a FF failing to trigger from 1 to 0 Is considered. W« 
return 10 the second add to PC pulse. If this failure exists, FC will 
contain either 1 or 3 after this pulse. Tho subsequent FC read out 
cof-rand will coups the next Instruction to be taken from register 1 In 
the first case and fror either register 1 er 3 In the second case, depend1 g 
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oa vhetbrr CrTO? cjm) GT03 have failed or not. If it 1 b taken from 
register 1, the instruction* in register 0, 1, and 1 will he per¬ 
formed in that order. Register 1 should contain an {Instruction which 
yields on alarm when -performed twice after the instruction in register 
0, hut not when it is performed once after the instruction in register 
0. Furthermore, it should be each that an alarm is obtained when the 
instructions are rerf'-rmed in the order 0, 1, 0. The instruction 
ad RCCl/U) satisfies these requirement*. The other possibility i 1 - that 
the next Instruction is taken from register 3l the instructions are 
the performed in the order 0, 1, 3* Suproe® that register 3 el»© con¬ 
tains ad RC(l/U). With this order of Instructions, an alnnr is obtained 
If none of these feults is present, then the instructions will be per¬ 
formed in the correct order, i.e., 0, 1, ?, 3* In order to ovoid an 
alarm in correct operation, register ? should contain eu^ PC(*), where 
2 is greater than 0. 

I}y continuing this reasoning to the ot^er digit* of TC, it is 
possible to obtain a c-rolet® seouecce on the basis of the asrorTtlone, 
The detail* bec'-re highly involved, though, and will not be given here- 
The process of determining appropriate operands (e.g. the quantity 2 nen> 
tioned above) to be used with the various instructions eventually ra- 
quires the solution of simultaneous inequalities, A set of solutions, 
using numbers which are exprep^ed simply in binary notation, was obtains 
by trial and error. The esquence which is based on this set of selation'i 
is given in Appendix TI as Test Sequence Number XV. Again, only the 
contents of certain register* need be speclfiod to obtain this check. 
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The other® may be used for any parrots desired. The choice of the 
register? to hold the orer&nds was mad* quite arbitrarily. The two 
pc instructions were used to provide continuity ir tfte coded progm*. 
Their uso requires that the PC read-in gate tubes be working property. 

5.3 Trouble Location - Control-Pul^e Output Unite 

The test sequence* designed in this thesis nr.y he used in 
trouble-location proceduresan alarm is obtained during the pe % 
formanc® of a test sequence, a failure is known to exist. The tyr© of 
slam' indication, together with the-contents of the various regi't rs, 
e' ou d rrovide information which simplifies the task of locating thti 
trouble, in addition, if this alarm indication '1 not obtained vrith 
the normal supply voltages, but only under marginal checking condHions., 
it ie reasonable to assume that the defective component is supplied by 
the bnrtlc;l«r voltage-variation line involved. If the margin thu« 
obt:Ined is abnormally low, the defective c^mpon^nt should be fo hd and 
repaired (or replaced). 

There are two closely related, a 1 ’’'re ache a tc the use of inform© 
tion provided b.v test sequences in troutle-locatlon 'procedures. One 
is to coop^re this data with © list of the symptom* manifested b; the 
various posoitle failures. Such a tnbulrtion may be obtained by de¬ 
termining the C'routed resets in the presence of each possible failure. 
If the -'rforratlon obtained from the performance of a test sequence 
matches one of the tabul->t«d sets of symptoms, the fault is fairly veil 
located. Hovver, it is quite roesihle tft.t the alarm was coustw!. by a 
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co^bin." tion of failures not considered in the compilation. This leade 
us to the second approach to trouble location, deduction baaed on the 
available data, Deduction way be usad to supplement a. lint of sympoms, 
or it nay be used as a enrol*tely Independent method of trouble loco- 
tion. It requires highly skilled personnel end, on the average, is 
more time consuirlBg than the use of a list, Vhile the tabulation of 
symptoms is a tedious and unattractive task, it makes It possible for 
relatively unskilled personnel to handle routine rroblems in trouble 
location. Highly skilled personnel may be called in when the li't rrorep 
inadequate. 

The use of both of these arrroaches will be i^uetrated in 
connection with Tert Sequence dumber V (see Appendix II), which has 
b*er, designed t* check the e^ntnol-pulse outrut units (see Fig. IB) 
under the single fault assumption. The design details have been omitted, 
but they a « quite straightforward. Te*t Sequence Kumber V does not aprl 
to nil the«e units because the 3? registers of test storage are in- 
adeouate for all the short sequences which are required. 

To illustrate t ! 'e fir®t amroach, assume that unit number 1 
will not pass a pulse when sensed. The pulse wMch it normally provides 
is used t* read oit the contents of the step counter on TPJ of the sf 
o^era ion (see Fig. 10). This failure vould thus result in 0 being 
stored as the supposed scale factor. The only af operation is stored 
la re nter 1?. The scale factor which is rtored as a result of this 
or®rot on is checked by the £C instruction in re.lster lh. The check 
is not ■"erformed until TTS-, so that PC will contain 15 at that time. 

ft 
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Melt columsn 15, l* 4 , GJnri 1? of the check r*’glpt r will have received 

I from regl ter 3 tut not from AC. The check re,-l°ter will be comple¬ 
mented n« rart of check regirt'-r check, but will not;be recorpl©minted 
because the serire path of gat© tubes will not transmit « pulse. Thus, 

CR will contain 0 in digit columns 15, lU and 1? end 1 in all others. 

An alarm pul'-e will be obtained w - lch will g© to the alarm Indicator 
and CPC, but it may be that TP1 will have occurred before the alans 
ruloe arrived at CPC. Thus TPT) may contain either f or 1. AC will 
contain *0 as will register 8. The contents of other registers are 
not itirediately relevant. 

Few suppose that the s.-urptoms described above are observed 

during volta. e variation. Using the second approach, we can deduce that 

the failure Is caused by a control-pulse output unit. Further, it in 

ap-nrent thr-t AC und register F contain <0 when they should contain 
-15 

II x ? # . T l le means that register l did not receive the scale factor 
on the instruction 2* f. Thls could bo due to the failure of SC to 
rr.d out or of register f to read in (or both). Either unit number 1 
failed to provide the command SC read out or unit number 67 failed to 
provide the com-and storage read in (rt.ll) . Row, unit number 67 

in also used on the tc_ and td operations, and, as it happens, there is 
on instrxct’on using ta stored in register 11. If 67 were the de¬ 
fective mit, register 9 would contain +0. If 1 were the defective unit, 

-15 

regi*‘©r 0 would contain its correct contents, 31*? • This reasoning 

assumes only single faults. 


I 
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If multiple faults wore present, the problem become? consider- 
ably -ore c mplle; ted. If the multiple fault rpsul'a In symptoms 
which ctn be esplainad by a single fault (e.g., the "failure of unite 
1 and 1C to provide a pul*e would have the same effect e« the failure 
of unit 6? to provide a pulse), the single fault, rhrnld be investigrted, 
elthr by re'ltcement of the supposedly defective unit or b ■ observa¬ 
tion of appropriate waveform*. If the unit Bppears to be operating 
satisfactorily, then the next star) Is to investigate these combi m tlons 
of faults wh ! ch explain the symptom*. T v ir is also the rrocedure to 
be followed when a multiple fault yields synrtoms which oannot be 
explained by a single r aalt. 

Further ereirrl^r of the are of te«t sequences in trouble 
location :>re given in sections 6.11 and 6.1?. 
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6,1 Experimental Results 

Now that the proposed method of designing tefct sequences 
ha* teen diecupeed In some dftn.ll, we may well question their useful¬ 
ness. It is quite conceivable that the aseunptlona involved In their 
design severely limit their aorlicebility la oil "Tactical oituatlono 
The final answer can only fee obtained from the actual ure of the test 
aequenci e. In order to £et fc-rt* Indication of their volute, pome time 
was poent in performing them on vr/I, 'xtoneive terts could not be 
carried out because only a limited time was available. The results 
a e therefore only surpestlve, not conclusive. 

The most logical way ef deterring the effectiveness of a test 
sequence In to ciuso a failure in one of the stapes It is designed to 
check, "he voltape-var’atIon facilities provide e convenient means for 
causing such a failure. Neasurements were made of some of the virglnn 
available with some sample problems. Several pro liens used for testing 
find demonstr? Mon were included to provide a ba«i'* for a com* 

parison. T*«t Program Humber I causes each flip-flop (except some in 

p 

control) to receive both 0 and 1. Test Program Humber TI p©’■forms 

each of the operations which have b-um accepted for permanent use in 
* 

Wl. y Display Program lumber I consists of two separate problems: 
one die-lays the curves y = *, y = and y ^ on an osclllooco e, 

7 

the other displays a far ily of '?raholas. 1 The measurements have beer 
tabulated in ?i£, ?3» 

The rarglns obtained with Test Program lumbers I and II did 
not differ materially from these obtained with the test sequences. 
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TMs indicates th- fc the test programs are about os effective as the 
test sequences for the tyres of failures that occurred*, Cn the oth*:r 
hond, the margins obtained with DisplayProgram Number I differed sig¬ 
nificantly front the ^f.rginp obtained with the test sequences. In g^nerc-2 
Ditrlay rrorram Number I had larger margin* than the test sequences, 
Indicating th- t the test sequences are more effective. However, the 
negative -nrgin on line 79 with Display Fro gram FUmber I was about half 
the margin with Test Sequence Number II. The low margin was traced to 
a defective flip-flop in the divide-pulse distributor (see section 6,12), 
but Display Program Number I does net use the divide operation at all! 

This points ur the need for further study of the factors which cause 
failures, ~..rtleu'arly with regsrd to the influence of voltage v- riatlon, 
ihe moft plausible explanation for the difference in the values of the 
margin is that c. dynamic failure existed which was accentuated by thr» 
frequency with which the multiply operation Is performed in Display 
Program Dumber I. Perhaps the foot that the targln was measured by 
noting the voltage at which the oattem on the dlsolay oscilloscope 
become distorted (no alarm was obtained) h*d some tnfl ienee on this 
difference. In other words, mi r takes in cor utrton night appear before 
an alarm is obtained. Further inveetigctlon to obtain a more satisfactory 
ey^lan tiro could not be carried out. 

A e’earwcut example of tho inadequacy of Display Program 
Number T for checking purposetCof course, it was rot Intended as a cheek 
problem) is Provided by the negative rargin on line 113 * ^he margin 
obtained with Display Program fumber I was about twice thr.t obtained 
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with ?«?Kt Soquenc© Number III. THs low mrgin wc» traced to a defective 
read-in gate generator in the «tep counter (see section 6.11). Display 
i'rogxam Num’er I doee not up© the a v lft ororation and'bonce is not af¬ 
fected by tHp failure. 

Of oomo interest Is the difference between negative and roui- 
tive rargin* on line 113. It indicate* that the f• ilunv *>f r gate tube 
to pass a oulre ie *r.r more lively than the generation of a spurious 
pul*e. Also of interest are the difference*! between positive and nega¬ 
tive margins on lines 79 •'“■nd GD. It has been more or le^t standard 
practice to use the positive margins as an indication of the crndlMm 
of a flip-flop when the complementing technioue (see section 3 * 3 ) ifl 
employed. The positive margins on thane Unas wore no to than udequate t 
hut 8 o>re of the negative n gins were quite low, T Is suggests that 
negative margin* right well be taken into accomt in the comolementisig 
procedures. 

The most fiignifleant result of the use of t'v test sequences 
is their a”rlicntlon to the location of the caueas of the low margin*). 
? v in is described in detail below. 

6.11 Discussion of Low Nargln on Line 113 

Tn measuring the margin on line 113| with T' »t Sequence !?urtber 
ITI, it wos noted th-rt the alarm was connitently obtained on the g£ 
Instruction contained in register 10 . *he check register showed that 
digit column 1 was at fault. AC contained +l/? instu&d of +0» indicating 
that no shift was v orformed. Since other shift operations were -erformefl 
successfully, the fault was rrobabl;. due to the failure of the read in 



Report R-177 


98 - 


>» 


gate tub*- of digit ©olumr. 11 to rang a pal-s. An oscilloscope probe 
placed on the eap’-repeor of t'-ip gate tube showed the gating signal had 
nja unusuolly lov ;ur>rlltude. furthermore, the amplitude of fcMn ?ate 

l 

rr.rled v.ith the volt-ge apr-lied to line 113- T'is woo a rather sur¬ 
prising result beenup** the goto generator was not suprlied by lin® 11?, 
However, further rearch showed that a wiring mietaice had been mad©* 

The screen of GO V10P (see Fie. ?1), v ich should have b'-en supplied 
by line 9&» was actually supplied by line 113® This substantiates thi 
reasoning of section 5*13 i& which it is shown th-1 a failure on lina 96 
will be detected by tils sequence,. It is interesting to rote that this 
mistake did 1 ot affect oxer-1ion at normr4 volt re, even though the 
screen was sun "lied v.ith + n 0 volts lnste? i of tl?0<> The ontiro in- 
vesti/x tion, from the time the r-'S’lt* wore analysed to the time the 
correction in wiring was made, too* aprroTinelely ’J-5 minutes. T-Ip is 
less than the arbitrary standard, of 1 hour discussed in paction 1.? 
ond is considered fairly noteworthy, 

6.1? Pjscucslon of Low Hargin on Line 79 

In measuring the margin on line 79 v dth Test ^eouence 1’umber 
II, it was noted that the a’if.rm vae c-neistently obtain^' on the jje. 
Instruction contained in register ?9« The cher'. register indie tod 
that the discrepancy was in digit column 1. T'-ia was C'nfired by AC 
which contrlned 0 instead of +l/?. T'-io could most easily be accounted 
for V a failure to shift left. However, since only the flip-flops 
of arit 1 retie control wer** undergoing volt'ge variation, the failure 
to shift would mean that TF307.01 cannot transmit 1. This vo.4d result in 


/ • 
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ft "prolonged stop clock", not n c.':.eck register alarm. To make this 
hypothesis even more untenable, th« re was another sl_ Instruction in 
resistor 15 which ar-oa’-ently gav® nr. trouble. The onXy other conclusion 

wee th-1 there wee something wrong with the divide operation. It cculd 
not be the failure of 7T708.01 to transmit 1, for that would result In 
a "prolong* • stop clock". The only ether possible source of error 
was the dlvlde-pulpe distributor, bat the r^tults obtained were not 
any of those which had been calculated for steady-state failures of 
the divide-pulse distributor. The complementing epeek was the per¬ 
formed on these flip-flops tad FFJOBoOU was found to have a low margin. 

The tubos wv.*re replacsd -nd the margin (with Test Seemrnce Ftattter II) 
was increased from -»17 volts to -31 vrlts. Furthermore, the al-ro was 
obtained at a different point In the soeuence. The only po«siHe 
esc-lunation of the inconsistent results is that the fault woe not 
steady-state, ever, at the reduced voltage. The time reouired to cor¬ 
rect this situation was nbout 79 minutes. Some time cculd Undoubtedly 
have been saved if the c- rolomanting procedure hr d been u?ed lmrediately. 

6,? Pvaluctlon of the Resign Procedure 

The rrevimie sections of this chapter hrve diHc;seed the 
results obta^d fron the use of seme of the t»«t sequences. Fven 
though these invssti-• ti'-ns were very limited in score, some very use¬ 
ful information va* obtained, Particularly regarding trouble locution. 

The test sequence* ar^arently do accomplish t v elr avowed alns, and Indeed, 
even exceed exoec'/ations. The loc tion of a non-steady-staVe failure 
in the divids-pul re distributor, desrdte the fact that an alternate method 
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Vr.6 used for confirmation, was a notable achievement;. A complete set of 
te*t frequence® «’ ©uld be a powerful tool in achieving computer reliability. 
Can the design procedure outline in tMi thesis be us>d to obtain 
each & sett In theory, at least, the answer is crrarently yes. The 
liri tct icne Bswn to be of a practical nature and concern the amount of 
work required for some of the rcre complicated chnnel segnents. The 

* l 

effort required in somo of there eases ray not Justify the results. 

It would orobaMy be more efficient to devise alternate schemes. A 
certain amount of study should precede the desim of a tost sequence 
in order to determine whether the effort might better be expended in 
other directions. 

% 

The efficiency problem Is most likely to be serious for those 
chair el segments which control the ranirulatlon of information in ether 
r-rts of the corruter. The tlme-pul'-e distributor is nerhaps the greatest 
offender in thie rapsect, since It controls most of the operation 
of the computer* A good dsal of analysis is required to determine whether 
an alarm is actually obtained in the presence of a failure. An indica¬ 
tion of the magnitude of this task may be hod from the fact that about 
P*j b'ure were required to determine whether an alarm would bo obtained 
with tjnogrom timing only (assuming r.ll registers clear and operation 0 
giving urogram timing) for an open circuit in each of the crystals of 
the matrix. Incidentally, it is interesting to note that en alarm would 
be obtained for only 6 of the ?4 crystals. In cases of this nature, it 
is probably most efficient to circumvent the detailed analysis by ths 
Installation of a built-in checking device (such a device rae been 
proposed for the tiire-pulse distributor). However, it seems likely that 

the procedure is not unduly corplicated in nort cases. Of course, the 



Report R«177 


101 - 


complexity increases rapidly when multiple fault* are considered. 

Te't eequfjnce* designed for complicated channel segments arc 
of du.M'-'us value in trouble-locj tiou procedures. In'many cases the test 
sequence will only soeclfy the channel eextent in which the failure exist'*. 
The knowledge that & failure exists somewhere in a large number of stage} 
is not particularly helpful. Such information could probu>ly be ob¬ 
tained much more simply. The effort ef designing e test sequence is 
hardly Justifiable. 


6.3 Suggestions far ?Urth*r Wo ^ • 

The po«*ibllltlee of test checking have not been fully ex¬ 
plored in this thesis by any stretch of the nation. A much simpler 

s-pp roach to the pro blow might very veJ] exist. If such an nprroach could 
be found, it would certainly Ns a gre r t boon to the people who are eon- 
cerened with designing t Q st problem®. 

*eg rdloss of whether a new arproach can he found, much work 
rona’ns to he done, quantitative inve«tigations of th* factors influencl fg 
failures er» extremely important. The design of te*t secuences should 
take into account as many of these factors a* possible. C? course, 
there ar» the tasks of actually designing te-t sequences for the 
entire cotputnr and analysing the results for trouble location 
purposes. 


In conclusion, it should be emphasised that the method pre¬ 
sented in this thesis oan undoubtedly be used for designing test se¬ 
quences. The results obtained are encouraging and serve as a starting 
point for future study which should be directed towards simpler and more 
efficient methods. 


Signed 6 * 

Gerald Coope 



Approved 
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A SHORT GUIDE TO CODING 


(using the Whirlwind I code of October 1949) 


COMPUTER PROGRAMS 

Program . A program is a sequence of actions by which a computer 
handles a problem. The process of determining the sequence of actions 
is known as programming. 

Flow diagrams . A flow diagram is a series of statements of what the 
computer has to do at various stages in a program. Lines of flow indi¬ 
cate how the computer passes from one stage of the program to another. 

Coded program . Programs and flow diagrams are largely independent 
of computer characteristics, but instructions for a computer must be ex¬ 
pressed in terms of acode. A set of instructions that will enable a com¬ 
puter to execute a program is called a coded program, and the process 
of preparing a coded program is known as coding. 

Orders and operations . Individual coded Instructions are known as 
orders and call for specific operations such as multiply, add, shift, etc. 

The computer code . The computer code described here is that of 
Whirlwind I, an experimental computer using binary digits, single¬ 
address order code, parallel operation, and electrostatic storage. It is ex¬ 
pected that computers of this type will ultimately achieve an average 
speed of 50,000 operations per second. 

COMPUTER COMPONENTS 

Registers and words . A register has 16 digit positions each able to 
store a one or a zero. A word is a set of 16 digits that may be stored in a 
register. A word can represent an order or a number. 

Arithmetic element . Arithmetic operations take place in the arith- 
metic element, whose main components are three flip-flop registers, the 
A-register, the accumulator, and the B-register (AR, AC, BR). The 16 
digit positions of AR starting from the left are denoted by ARO, AR 1, . . ., 
AR15. Similarly for AC, BR. Words enter AC through AR; BR is an 
extension of AC. 

Storage . The term "register" by itself refers to the main electrostatic 
storage, which consists of 2 11 or 2048 registers, each of which is identi¬ 
fied by an address. These addresses are 11-digit binary numbers from 
0 to 2047. The computer identifies a register by its address. 

Input-output. All information entering or leaving the computer is tem - 
porarily stored in the input-output register (IOR). The computer regu¬ 
lates the flow of information between the internal storage and IOR, and 
also calls for any necessary manipulation of external units. The descrip¬ 
tive names of the input-output orders were chosen for photographic film 
reader-recorder units, but the orders are applicable to other types of ex¬ 
ternal equipment. 

Control element . The control element controls the sequence of com¬ 
puter operations and their execution. Instructions are obtained from stor - 
age in the form of individual orders, each of which is represented by a 
single word. 

Inter -connections . The four main elements (storage, control, arith¬ 
metic, and input-output) are connected by a parallel communications sys¬ 
tem, known as the bus. 

REPRESENTATION OF ORDERS 

Operation section . When a word is used to represent an order the first 
(left-hand) 5 digits, or operation section, specify a particular operation 
in accordance with the order code. 

Address section . The remaining 11 digits, or address section, are 
interpreted as a number with the binary point at the right-hand end. In the 
majority of orders this number is the address of the register whose con¬ 
tents will be used in the operation. In orders si, sr, the number specifies 
the extent of a shift; in rf, rb, the number specifies an external unit; in rl, 
rs, the address section is not used. ■ 

Example . The order cax has the effect of clearing AC (making all the 
digits zero) and then putting into AC the word that is in the register whose 
address is x. If q is a quantity in some register, the order needed to put q 
in AC is not caq but cax, where x is the address of the register that con¬ 
tains q. 


REPRESENTATION OF NUMBERS 

Single-word representations . When a word is used to represent a 
number the first digit indicates the sign and the remaining 15 are numeri¬ 
cal digits. For apositive number the sign digit is zero, andthe 15 numeri¬ 
cal digits with a binary point at their left specify the magnitude of the num¬ 
ber. The negative -y of a positive number y is represented by comple¬ 
menting all the digits, including the sign digit, that would represent y. (The 
complement is formed by replacing every zero by a one and every one by 
a zero.) In this way a word can represent any multiple of from 
2~ 1 5 . i to 1 - 2” 1 5 . Neither +1 nor -1 can be represented by a single 
word. Zero has two representations, either 16 zeros or 16 ones, which 
are called +0 and -0 respectively. 

Overflow — increase of range and accuracy . With single-word 
representation the range is limited to numbers between 2 _1 5 - l and 

I - 2 _1 5 . Programs must be so planned that arithmetic operations will not 
cause an overflow beyond this range. The range may be extended by using 
a scale factor, which must be separately stored. Accuracy can be in¬ 
creased by using two words to represent a 30-digit number. 

COMPUTER PROCEDURE 

Sequence of operations . After the execution of an order the program 
counter in the control element holds the address of the register from which 
the next order is to be taken. Control calls for this order and carries out 
the specified operation. If the order is not sp or cp(-) the address in the 
program counter then increases by one so that the next order is taken from 
the next consecutive register. The sp and cp(-) orders permit a change 
in this sequential procedure. 

Transfers . A transfer of a digit from one digit position to another af¬ 
fects only the latter digit position, whose previous content is lost. 

Negative zero . The subtraction of equal numbers produces a negative 
zero in AC, except when AC contains +0, and -0 is subtracted from it. 

Manipulation of orders. Words representing orders may be handled in 
the arithmetic element as numbers. 

Procedure in the arithmetic element . The execution of an addition in¬ 
cludes the process of adding in carries; this process treats all 16 digits 
as if they were numerical digits, a carry from AC 0 being added into AC 15. 
A subtraction is executed by adding the complement. Multiplication, divi¬ 
sion, shifting and round-off are all executed with positive numbers, com¬ 
plementing being performed before and after the process when necessary. 
For round-off the digit in BR 0 is added into AC 15. 

NOTATION FOR CODING 

Addresses . A coded program requires certain registers to be used for 
specified purposes. The addresses of these registers must be chosen be¬ 
fore the program can be put into a computer, but for study purposes this 
final choice is unnecessary, and the addresses can be indicated by a sys¬ 
tem of symbols or index numbers. 

Writing a coded program . Registers from which control obtains or¬ 
ders may be called action registers, and should be listed separately from 
registers containing other information, which may be called data regis¬ 
ters. A coded program iswritten out in two columns; the first contains 
the index number of each action or dat$ register, and the second column 
indicates the word that is initially stored in that register. In many cases 
part or all of a word may be immaterial because the contents of the regis¬ 
ter in question will be changed during the course of the program. This 
state of affairs is indicated by two dashes, for example, ca —. 

The abbreviations RC, CR . Abbreviations used in referring to the 
register that contains a certain word or to the word in a certain register 
are 

RC . . . = (Address of) Register Containing . . . 

CR . . . = Contents of Register (whose address is) . . . 

The symbol rl x . When an address forms part of an order it is repre¬ 
sented by the last 11 digits of a word whose first 5 digits specify an opera¬ 
tion. An address x that is not part of an order is represented by the last 

II digits of a word whose first 5 digits are zero, which is equivalent to 
specifying the operation ri. Thus the word for an unattached address x 
may be written ri x. It could also be written x x . 



THE ORDER CODE 


AC - Accumulator 

x Is the address of a storage register; 


AR = A-Register BR = B-Register 
n is a positive integer; k designates an external unit 



Operation 



Order 

Name 

Code 

' Function 


Decimal 

Binary 


ri — 

read initially 

0 

00000 

Take words from external unit until internal storage is full. 

rs -- 

remote unit stop 

1 

00001 

Stop external unit. 

rf k 

rim forward 

2 

00010 

Prepare to use external unit k in forward direction. 

rb k 

run backward 

3 

00011 

Prepare to use external unit k in backward direction. 

rd x 

read 

4 

00100 

Transfer to register x a word supplied by external unit. 

rc x 

record 

5 

00101 

Arrange for transfer of contents of register x to external unit. 

ts X 

transfer to storage 

8 

01000 

Transfer contents of AC to register x. 

td x 

transfer digits 

9 

01001 

Transfer last 11 digits from AC to last 11 digit positions of register x. 

ta x 

transfer address 

10 

01010 

Transfer last 11 digits from AR to last 11 digit positions of register x. 

cp(-)x 

conditional program 

14 

onio 

If number in AC is negative, proceed as in sp; if number is positive disregard the cp(-) 
order, but clear the AR. 

sp X 

subprogram 

15 

01111 

Take next order from register x. If the sp order was at address y, store y + 1 in last 11 
digit positions of AR. 

ca x 

clear and add 

16 

10000 

Clear AC and BR, then put contents of register x into AC. If necessary, add in carry from 
previous sa addition. 

cs X 

clear and subtract 

17 

10001 

Clear AC and BR, then put complement of contents of register x into AC. If necessary, 
add in carry from previous sa addition. 

ad x 

add 

18 

10010 

Add contents of register x to contents of AC, storing result in AC. 

SU X 

subtract 

19 

10011 

Subtract contents of register x from contents of AC, storing result in AC. 

cm x 

clear and add magnitude 

20 

10100 

Clear AC and BR, then put positive magnitude of contents of register x into AC. If neces¬ 
sary add in carry from previous sa addition. 

sa x 

special add 

21 

10101 

Add contents of register x to contents of AC, storing result in AC and retaining any over¬ 
flow for next ca, cs, or cm order. Only orders 1 through 15 may be used between the sa 
order and ca, cs, or cm orders for which the sa is a preparation. 

ao x 

add one 

22 

10110 

Add the number 1 x 2” 1 5 to the contents of register x. Store result in AC and in register x. 

mr x 

multiply and round off 

24 

11000 

Multiply contents of register x by contents of AC; round off result to 15 numerical digits 
and store in AC. Clear BR. 

mh x 

multiply and hold 

25 

11001 

Multiply contents of register x by contents of AC and retain the full product in AC and the 
first 15 digit positions of BR, the last digit position of BR being cleared. 

dv x 

divide 

26 

11010 

Divide contents of AC by contents of register x, leaving 16 numerical digits of the quotient 
in BR and ±0 in AC according to sign of the quotient. (The order si 15 following the dv order 
will round off the quotient to 15 numerical digits and store it in AC.) 

si n 

shift left 

27 

11011 

Multiply the number represented by the contents of AC and BR by 2 n . Round off the result to 
15 numerical digits and store it in AC. Disregard overflow caused by the multiplication, but 
not that caused by round-off. Clear BR. 

sr n 

shift right 

28 

11100 

Multiply the number represented by the contents of AC and BR by 2” n . Round off the result 
to 15 numerical digits and store it in AC. Clear BR. 

sf X 

scale factor 

29 

11101 

Multiply the number represented by the contents of AC and BR by 2 sufficiently often to make 
the positive magnitude of the product equal to or greater than 1/2. Leave the final product in 
AC and BR. Store the number of multiplications as last 11 digits of register x, the first 
5 digits being undisturbed. 


NOTES ON THE ORDER CODE 

Effect of operations . The functions of the various orders are de¬ 
scribed above. It is to be assumed that AR, AC, BR, and the register 
whose address is x are undisturbed unless the contrary is stated. 

AR. AR is primarily a buffer register for passing words into AC. 
After orders cax, csx, adx, sux, sax, and aox it contains the number 
originally contained in register x. After orders cmx, mrx, mhx, and 
dv x it contains the magnitude of the contents of x. The effect of sp x and 
cp(-)x is stated above. No other order changes the contents of AR. 

BR . A number stored in BR always appears as a positive magnitude, 
the sign of the number being assumed to be that mdlcated by the sign 
digit in AC. This convention has no effect on the logical result of the 
operations involving BR except that when BR contains a number that will 
be used later it is necessary to retain the appropriate sign digit. 

Alarms . If the result of an arithmetic operation exceeds the register 


capacity (l.e., if overflow occurs), a suitable alarm is given except as 
mentioned in connection with orders sax and sin. 

Shift orders . A multiplication overflow in si is lost without giving 
an alarm, but an overflow from round-off gives an alarm. Orders srO 
and si 0 only cause round-off, an alarm being given if an overflow occurs. 
The integer n is treated modulo 32, i.e., si 32 = slO, si 33 = sll, etc. 

Scale factors . If all the digits in BR are zero and AC contains ±0, the 
order sfx leaves AC and BR undisturbed and stores the number 33 in j 
the last 11 digit positions of register x. 

Division . Let u and v be the numbers in AC and register x when the 
order dvx is used. If |u| < |v| the correct quotient is obtained and no 
overflow can arise. If |u|>|v| overflow occurs and gives an alarm. If 
u = v / 0 the dv order leaves 16 ones in BR and round-off in a subsequent 
si 15 would cause overflow and give an alarm. If u = v = 0 a zero quotient 
is obtained. 
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Register 

• 

Contents 

Order *•- 

0 

+0 



1 

P- 7 



P 

P"l 4 



■» 

?3 x ?“ 15 



(F?)4 

(receives acal© factor) 



5 

1/? 



6 

? -15 



7 

ca 5 

1 

?4 

g 

t>r 31 

2 

?5 

o 

J 

qc 0 

3 

etc 

10 

sf 4 

u 


11 

cu 5 

5 


IP 

er 13 

6 


13 

qc ? 

7 


l4 

co 4 

g 


15 

qc 3 

0 

* 


16 

c& 5 

10 


17 

sf It¬ 

11 


18 

er 6 

1? 


19 

qe 1 

13 


?o 

mr 1 

14 


pi 

qo P 

15 


?2 

cn 4 

16 


?? 

qc 0 

17 


?4 

ca 6 

18 


?6 

dr 5 

19 


?6 

qc 0 

20 


PI 

el 15 

21 


P8 

qc ? 

2? 


P9 

»P 7 

?3 



PC reset to 7¥ PC aad»carry may, but need, not, reeet TC 
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Register * 

Contents 

Order -ft 

0 

1/? 


1 

1/4 


? 

-1/2 


3 

-1/4 


(ff)4 

(recelreo soale factor) 


5 

1/4 + ?~ 15 * 


6 

+0 


7 

-0 


s 

ca 0 

1 PS 

9 

mr 0 

? ?7 

10 

qc 1 

3 etc 

u 

ef 4 

4 

l? 

oc 0 

5 

13 

sr 1 

6 

14 

qo 1 

7 

15 

al 1 

s 

16 

qe 0 

10 

17 

aa 0 

11 

IF 

qc 6 

IP 

19 

ca 1 

13 

po 

oc 5 

14 

?1 

c& ? 

15 

?? 

*& ? 

16 

?3 

ec 7 

17 

?4 

Ca 5 

IS 

95 

60 1 

19 

?6 

dv 0 

?o 

27 

qC 6 

?i 

?F 

sl 15 

?? 

?9 

qc 0 

?3 

30 

mr ? 

p4 

31 

oc 3 

?5 


PC reset to S; PC end-carry should rerst PC 
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Regi~ ter i- 

Contents 

’ Order £ 

0 

+0 


1 

14 x f>“ 15 


>')? 

t* 0 («4/?) 

(changed ty order 

3 

33 x 2* 15 


>~)U 

(receives scale factor) 

5 

If? 


6 

?~° 


7 

.?~V 


F 

ca 5 

1 ?5 

9 

*r l6 

2 ?6 

10 

qC 0 

3 etc. 

il 

of 4 

U 

l? 

ed 4 

5 

17 

oc 3 

6 

14 

•r 1 

7 

15 

td 2 

F 

16 

c& 6 

9 

17 

rh 6 

10 

IB 

*f 4 

11 

19 

p.d U 

1? 

7) 

qC 2 

13 

21 

CP. 7 

14 

2? 

el 14 

15 

? 3 

cc 5 

16 


er 15 

17 


qc 7 

IB 

?6 

pi 0 

19 

?7 

oc 7 

20 

?& 

sf 4 

21 

PS 

qc 5 

22 

30 

ee 4 

?3 

31 

qC 1 

?h 

PC reset to Fj JPC 

ea&-carry met reset fC and Register ~2c 
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Register t Coatenta Order # (in correct ope ratio* 


0 

ad 20 

l. 15 

1 

ad PI 

? l(i 

? 

P7 

3 eta 

7 

> 

ad PI 

4 

4 

ad ?g 

5 

5 

BU PO 

6 

6 

ad PI 

7 

7 

ad PI 

8 

s 

qC P9 

9 

9 

*p 15 

10 

10 

— 


li 

— 


x? 

ad PI 


13 



14 

»<M»W 


15 

ca PO 

li 

l 6 

OC PO 

l? 

17 

*p 51 

13 

18 

W»««k 


19 

+0 


PO 

+ 1 /P 


?i 

■t-l/u 


p? 



?3 



?4 

ad PO 


?5 

—~ 


?6 

—— 


?7 

+ 1/8 


?8 

+ 1/16 


?9 

+15/16 


30 



31 

ea 19 

14 


PC re rat to 0? PC eM-ca^ry m * t not r^set PC 
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R»k1f ter # 


Content 

Order ¥ (in nonnal 

op ra¬ 




< 

i 

ti'. n> 

0 


dv 1 



1 


+0 



? 


*** 





nix ?" 15 



U 


♦ Tlx?" 15 



5 


-1/U 



6 


♦1/? 



7 


-1/? 



(r )f 


(reserve* ecsle factor) 

(reset to ♦<)) 


TO 9 


(receive* addreee on ta) 

(reset to +0) 


(f )io 


(is added to on eo) 

(re?et inoaterial) 


ll 


ta 9 

3 ?? 


l? 


*f e 

4 

s 


13 


CG 0 

5 etc. 


14 


oo 3 

6 


15 


si lU 

7 


16 


oc 6 

s 


17 


mr 7 

9 


1C 


co 5 

10 


19 


cp ?1 

n 


?o 


dv 1 



?i 


*r 14 

l? 


?? 

> 


qc ? 

13 


?2 


t» 10 

14 


pU 


ca 9 

15 


P 5 


oc 4 

16 


p 6 


ao 10 

17 


?7 


cm 10 

18 


pr, 


oc 1 

19 


* 9 


r.d 3 

1 PO 

t 

50 


ep 11 

p PI 


51 


dv 1 



TC reset to 

?9; re 

end-carry nay, but need r.ot, 

re"«t re. 


AC 

flhould 

be clei-r at start. 

. 
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Channel * 

Channel Segment; 
Components 

Sections 

Stages 

Test Sequences 


Units 


APP 'NPIX III - Glossary 


Any of the routes which may he ta-caa by information 
supplied to the input of the computer. 

The portion of a channel which in contained in a section. 

The most elementary parte of which the computer is 
constructed, e„g,„ resistors, condensers, vacuum tubes, etc 

All stages which are supplied by a given voltage~variaticn 
line. 

An elementary circuit containing at leant one vacuum 
tube (or its equivalent) which performs a single func¬ 
tion (eg,, a flip-flop, a gate tube, or an electronic 
switch, but not a register, a counter, nor an adder), 

A grour of instructions to the computer which cause 
information to be routed along certain channel seg¬ 
ments, As used in this thesis, test sequence refers 
to a group which may be performed with the 3? registers 

V 

of test storage-. 

Any nortlon of the conrauter which consints of at 
least- one stage. 
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NOTE I : NO ACTUAL ALARM OBTAINED. MARGIN MEASURED BY 
NOTING VOLTAGE AT WHICH THE PATTERN ON THE 
DISPLAY OSCILLOSCOPE BECOMES DISTORTED 

NOTE Z- NO ACTUAL ALARM OBTAINED. THE “PROLONGED STOP- 
CLOCK" CONDITION OCCURS AT THE INDICATED 
VOLTAGES. 
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